BrainStormForce Spectra Gutenberg Blocks – Website Builder for the Block Editor

• CVE-2026-7465 High 8.8 Spectra Gutenberg Blocks <= 2.19.25 - Authenticated (Contributor+) Remote Code Execution via Arbitrary PHP Function Call via Block Attributes 1.2%
• CVE-2026-0950 Medium 5.3 Spectra Gutenberg Blocks <= 2.19.17 - Unauthenticated Information Disclosure in Sensitive Data 0.4%
• CVE-2025-11162 Medium 6.4 Spectra <= 2.19.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom CSS 0.2%
• CVE-2025-1784 Medium 6.4 Spectra – WordPress Gutenberg Blocks <= 2.19.0 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%
• CVE-2024-10484 Medium 6.4 Spectra – WordPress Gutenberg Blocks <= 2.16.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Team Widget 0.3%
• CVE-2024-4366 Medium 6.4 Spectra – WordPress Gutenberg Blocks <= 2.13.0 - Authenticated (Author+) Stored Cross-Site Scripting 0.3%
• CVE-2024-1814 Medium 6.4 Spectra – WordPress Gutenberg Blocks <= 2.12.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Testimonial Block 0.3%
• CVE-2024-1815 Medium 6.4 Spectra – WordPress Gutenberg Blocks <= 2.12.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Gallery Block 0.3%
• CVE-2024-3107 Medium 4.3 Spectra – WordPress Gutenberg Blocks <= 2.12.6 - Authenticated (Contributor+) Path Traversal 0.6%
• CVE-2023-6486 Medium 6.4 Spectra – WordPress Gutenberg Blocks <= 2.10.3 - Authenticated(Contributor+) Cross-Site Scripting via Custom CSS 0.6%
• CVE-2020-36702 Medium 5.5 Spectra – WordPress Gutenberg Blocks <= 1.14.7 - Missing Authorization 0.4%