SecAlerts
spectra logo

spectra

Security Risk Profile

70
/100
high

Security Risk Score

Comprehensive risk assessment based on 11 vulnerabilities, EPSS scores, exploitation status, and remediation availability.

📅 Data spans from April 9, 2024 to present

11
Total CVEs
2
Critical+High
0
Exploited
2
Unpatched

Threat Assessment

Avg CVSS
6.6
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
2
Critical/High
Risk Level
70/100
high

Severity Distribution

Critical
0
High
2
Medium
9
Low
0

Exploit Likelihood

>50% chance
0
20-50%
0
5-20%
0
<5%
2

Age Distribution

Common Weaknesses (CWE)

1
XSS
8
2
Path Traversal
1

Most Affected Products

1. Spectra WordPress Gutenberg Blocks7
2. Brainstormforce Spectra Wordpress6
3. Spectra Spectra Gutenberg Blocks2
4. Spectra Spectra Pro2
5. Wpspectra Spectra Wordpress1

Recent Vulnerabilities

See more →
CVE-2026-7465
CVSS 8.8high

Spectra Gutenberg Blocks <= 2.19.25 - Authenticated (Contributor+) Remote Code Execution via Arbitrary PHP Function Call via Block Attributes

5/30/2026🔧 No Patch
CVE-2025-11162
CVSS 6.4medium

Spectra <= 2.19.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom CSS

11/5/2025🔧 No Patch
CVE-2025-1784
CVSS 6.4medium

Spectra – WordPress Gutenberg Blocks <= 2.19.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

3/26/2025🔧 No Patch
CVE-2024-10484
CVSS 6.4medium

Spectra – WordPress Gutenberg Blocks <= 2.16.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Team Widget

12/3/2024
CVE-2024-3827
CVSS 6.4medium

Spectra Pro <= 1.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block IDs

8/2/2024🔧 No Patch
CVE-2024-4366
CVSS 6.4EPSS 0%medium

Spectra – WordPress Gutenberg Blocks <= 2.13.0 - Authenticated (Author+) Stored Cross-Site Scripting

5/24/2024🔧 No Patch
CVE-2024-1814
CVSS 6.4medium

Spectra – WordPress Gutenberg Blocks <= 2.12.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Testimonial Block

5/23/2024
CVE-2024-1815
CVSS 6.4medium

Spectra – WordPress Gutenberg Blocks <= 2.12.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Gallery Block

5/23/2024
CVE-2024-3828
CVSS 8.8EPSS 0%high

Spectra Pro <= 1.1.5 - Authenticated (Author+) Privilege Escalation

5/10/2024🔧 No Patch
CVE-2024-3107
CVSS 4.3medium

Spectra – WordPress Gutenberg Blocks <= 2.12.6 - Authenticated (Contributor+) Path Traversal

5/2/2024

Monitor spectra in Real-Time

Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.

Powered bySecAlerts

Monitor Your Software Stack in Real-Time

Get instant alerts when vulnerabilities are discovered in your software stack. Stay ahead of security threats with SecAlerts.

© 2026 SecAlerts Pty Ltd. All rights reserved.