Spectra Gutenberg Blocks – Website Builder for the Block Editor vulnerabilities

Product

Spectra Gutenberg Blocks – Website Builder for the Block Editor

by brainstormforce · last CVE May 30, 2026

CVEs

On KEV

8.8

Max CVSS

New 30D

Vulnerabilities11 In the news0 Timeline

Severity mix

Critical 0High 1Medium 10Low 0

Severity

All severities11 Critical0 High1 Medium10 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Spectra Gutenberg Blocks – Website Builder for the Block Editor to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-7465	8.8	1%	May 30	Spectra Gutenberg Blocks <= 2.19.25 - Authenticated (Contributor+) Remote Code Execution via Arbitrary PHP Function Call via Block Attributes Affected: through 2.19.25
CVE-2025-11162	6.4	0%	Nov 5	Spectra <= 2.19.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom CSS Affected: through 2.19.14
CVE-2025-1784	6.4	0%	Mar 26	Spectra – WordPress Gutenberg Blocks <= 2.19.0 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: through 2.19.0
CVE-2024-10484	5.4	0%	Dec 3	Spectra – WordPress Gutenberg Blocks <= 2.16.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Team Widget Affected: through 2.16.2
CVE-2024-4366	5.4	0%	May 24	Spectra – WordPress Gutenberg Blocks <= 2.13.0 - Authenticated (Author+) Stored Cross-Site Scripting Affected: through 2.13.0
CVE-2024-1814	5.4	0%	May 23	Spectra – WordPress Gutenberg Blocks <= 2.12.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Testimonial Block Affected: through 2.12.8
CVE-2024-1815	5.4	0%	May 23	Spectra – WordPress Gutenberg Blocks <= 2.12.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Gallery Block Affected: through 2.12.8
CVE-2023-6486	5.4	1%	Apr 9	Spectra – WordPress Gutenberg Blocks <= 2.10.3 - Authenticated(Contributor+) Cross-Site Scripting via Custom CSS Affected: through 2.10.3
CVE-2026-0950	5.3	0%	Feb 3	Spectra Gutenberg Blocks <= 2.19.17 - Unauthenticated Information Disclosure in Sensitive Data Affected: through 2.19.17
CVE-2024-3107	4.3	1%	May 2	Spectra – WordPress Gutenberg Blocks <= 2.12.6 - Authenticated (Contributor+) Path Traversal Affected: through 2.12.6
CVE-2020-36702	4.3	0%	Jun 7	Spectra – WordPress Gutenberg Blocks <= 1.14.7 - Missing Authorization Affected: through 1.14.7