Product by Brainstorm Force
Spectra Gutenberg Blocks – Website Builder For The Block Editor
11 known vulnerabilities in Spectra Gutenberg Blocks – Website Builder For The Block Editor (Brainstorm Force), 0 of them actively exploited (CISA KEV).
Key figures
11
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-7465 | Improper Privilege Management (CVE-2026-7465) | 8.8 | |
| Medium | CVE-2023-6486 | BrainStormForce Spectra: Cross-site Scripting | 6.4 | |
| Medium | CVE-2026-0950 | Spectra Gutenberg Blocks <= 2.19.17 - Unauthenticated Information Disclosure in Sensitive Data | 5.3 | |
| Medium | CVE-2024-3107 | Spectra – WordPress Gutenberg Blocks <= 2.12.6 - Authenticated (Contributor+) Path Traversal | 4.3 | |
| Medium | CVE-2025-11162 | Spectra <= 2.19.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom CSS | 6.4 | |
| Medium | CVE-2025-1784 | Cross-site Scripting (CVE-2025-1784) | 6.4 | |
| Medium | CVE-2024-10484 | BrainStormForce Spectra: Cross-site Scripting | 6.4 | |
| Medium | CVE-2020-36702 | Spectra – WordPress Gutenberg Blocks <= 1.14.7 - Missing Authorization | 5.5 | |
| Medium | CVE-2024-4366 | Spectra – WordPress Gutenberg Blocks <= 2.13.0 - Authenticated (Author+) Stored Cross-Site Scripting | 6.4 | |
| Medium | CVE-2024-1815 | BrainStormForce Spectra: Cross-site Scripting | 6.4 | |
| Medium | CVE-2024-1814 | BrainStormForce Spectra: Cross-site Scripting | 6.4 |