Skip to contentBrainstormforce Spectra Gutenberg Blocks – Website Builder For The Block Editor vulnerabilities
- brainstormforce spectra gutenberg blocks – website builder for the block editorSpectra Gutenberg Blocks <= 2.19.25 - Authenticated (Contributor+) Remote Code Execution via Arbitrary PHP Function Call via Block AttributesCVE-2026-7465Public exploit8.8 High
- brainstormforce spectra gutenberg blocks – website builder for the block editorSpectra Gutenberg Blocks <= 2.19.17 - Unauthenticated Information Disclosure in Sensitive DataCVE-2026-09505.3 Medium
- brainstormforce spectra gutenberg blocks – website builder for the block editorSpectra <= 2.19.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom CSSCVE-2025-111626.4 Medium
- brainstormforce spectra gutenberg blocks – website builder for the block editorSpectra – WordPress Gutenberg Blocks <= 2.19.0 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2025-17846.4 Medium
- brainstormforce spectra, spectra gutenberg blocks – website builder for the block editor +1 moreSpectra – WordPress Gutenberg Blocks <= 2.16.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Team WidgetCVE-2024-104846.4 Medium
- brainstormforce spectra, spectra gutenberg blocks – website builder for the block editor +1 moreSpectra – WordPress Gutenberg Blocks <= 2.13.0 - Authenticated (Author+) Stored Cross-Site ScriptingCVE-2024-43666.4 Medium
- brainstormforce spectra, spectra gutenberg blocks – website builder for the block editor +1 moreSpectra – WordPress Gutenberg Blocks <= 2.12.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Testimonial BlockCVE-2024-18146.4 Medium
- brainstormforce spectra, spectra gutenberg blocks – website builder for the block editor +1 moreSpectra – WordPress Gutenberg Blocks <= 2.12.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Gallery BlockCVE-2024-18156.4 Medium
- brainstormforce spectra, spectra gutenberg blocks – website builder for the block editor +1 moreSpectra – WordPress Gutenberg Blocks <= 2.12.6 - Authenticated (Contributor+) Path TraversalCVE-2024-31074.3 Medium
- brainstormforce spectra, spectra gutenberg blocks – website builder for the block editor +1 moreSpectra – WordPress Gutenberg Blocks <= 2.10.3 - Authenticated(Contributor+) Cross-Site Scripting via Custom CSSCVE-2023-64866.4 Medium
- brainstormforce spectra, spectra gutenberg blocks – website builder for the block editor +1 moreSpectra – WordPress Gutenberg Blocks <= 1.14.7 - Missing AuthorizationCVE-2020-367025.5 Medium