CVE-2026-92294 | Brainstormforce Spectra Legacy Plugin up to 2.20.4 on WordPress File Path Validation __construct path traversal

October 31, 2026 Yanac

A vulnerability, which was classified as critical, has been found in Brainstormforce Spectra Legacy Plugin up to 2.20.4 on WordPress. This vulnerability affects the function __construct of the component File Path Validation. Performing a manipulation results in path traversal.

This vulnerability is known as CVE-2026-92294. Remote exploitation of the attack is possible. No exploit is available.VulDB Recent EntriesRead More