SecAlerts
s

spectra

Security Risk Profile

38
/100
low

Security Risk Score

Comprehensive risk assessment based on 12 vulnerabilities, EPSS scores, exploitation status, and remediation availability.

📅 Data spans from April 9, 2024 to present

12
Total CVEs
2
Critical+High
0
Exploited
2
Unpatched

Threat Assessment

Avg CVSS
6.5
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
2
Critical/High
Risk Level
38/100
low
🆕 1Fresh (<7d)📈 1 in Last 30 Days

Severity Distribution

Critical
0
High
2
Medium
10
Low
0

Exploit Likelihood

>50% chance
0
20-50%
0
5-20%
0
<5%
2

Age Distribution

Common Weaknesses (CWE)

1
XSS
8
2
Infoleak
1
3
Path Traversal
1

Most Affected Products

1. Spectra WordPress Gutenberg Blocks7
2. Brainstormforce Spectra Wordpress6
3. Spectra Spectra Gutenberg Blocks2
4. Spectra Spectra Pro2
5. Spectra Spectra Legacy – Gutenberg Blocks1

Recent Vulnerabilities

See more →
CVE-2026-16302
CVSS 4.3medium

Spectra Legacy – Gutenberg Blocks <= 2.20.0 - Authenticated (Contributor+) Sensitive Information Exposure

Sep 24, 2026🔧 No Patch
CVE-2026-7465
CVSS 8.8high

Spectra Gutenberg Blocks <= 2.19.25 - Authenticated (Contributor+) Remote Code Execution via Arbitrary PHP Function Call via Block Attributes

May 30, 2026🔧 No Patch
CVE-2025-11162
CVSS 6.4medium

Spectra <= 2.19.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom CSS

Nov 5, 2025🔧 No Patch
CVE-2025-1784
CVSS 6.4medium

Spectra – WordPress Gutenberg Blocks <= 2.19.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

Mar 26, 2025🔧 No Patch
CVE-2024-10484
CVSS 6.4medium

Spectra – WordPress Gutenberg Blocks <= 2.16.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Team Widget

Dec 3, 2024
CVE-2024-3827
CVSS 6.4medium

Spectra Pro <= 1.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block IDs

Aug 2, 2024🔧 No Patch
CVE-2024-4366
CVSS 6.4EPSS 0%medium

Spectra – WordPress Gutenberg Blocks <= 2.13.0 - Authenticated (Author+) Stored Cross-Site Scripting

May 24, 2024🔧 No Patch
CVE-2024-1814
CVSS 6.4medium

Spectra – WordPress Gutenberg Blocks <= 2.12.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Testimonial Block

May 23, 2024
CVE-2024-1815
CVSS 6.4medium

Spectra – WordPress Gutenberg Blocks <= 2.12.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Gallery Block

May 23, 2024
CVE-2024-3828
CVSS 8.8EPSS 0%high

Spectra Pro <= 1.1.5 - Authenticated (Author+) Privilege Escalation

May 10, 2024🔧 No Patch

Monitor spectra in Real-Time

Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.

Powered bySecAlerts

Monitor Your Software Stack in Real-Time

Get instant alerts when vulnerabilities are discovered in your software stack. Stay ahead of security threats with SecAlerts.

© 2026 SecAlerts Pty Ltd. All rights reserved.