SecAlerts
s

spectra

Security Risk Profile

70
/100
high

Security Risk Score

Comprehensive risk assessment based on 11 vulnerabilities, EPSS scores, exploitation status, and remediation availability.

📅 Data spans from April 9, 2024 to present

11
Total CVEs
2
Critical+High
0
Exploited
2
Unpatched

Threat Assessment

Avg CVSS
6.6
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
2
Critical/High
Risk Level
70/100
high

Severity Distribution

Critical
0
High
2
Medium
9
Low
0

Exploit Likelihood

>50% chance
0
20-50%
0
5-20%
0
<5%
2

Age Distribution

Common Weaknesses (CWE)

1
XSS
8
2
Path Traversal
1

Most Affected Products

1. Spectra WordPress Gutenberg Blocks7
2. Brainstormforce Spectra Wordpress6
3. Spectra Spectra Gutenberg Blocks2
4. Spectra Spectra Pro2
5. Wpspectra Spectra Wordpress1

Recent Vulnerabilities

See more →
CVE-2026-7465
CVSS 8.8high

Spectra Gutenberg Blocks <= 2.19.25 - Authenticated (Contributor+) Remote Code Execution via Arbitrary PHP Function Call via Block Attributes

May 30, 2026🔧 No Patch
CVE-2025-11162
CVSS 6.4medium

Spectra <= 2.19.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom CSS

Nov 5, 2025🔧 No Patch
CVE-2025-1784
CVSS 6.4medium

Spectra – WordPress Gutenberg Blocks <= 2.19.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

Mar 26, 2025🔧 No Patch
CVE-2024-10484
CVSS 6.4medium

Spectra – WordPress Gutenberg Blocks <= 2.16.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Team Widget

Dec 3, 2024
CVE-2024-3827
CVSS 6.4medium

Spectra Pro <= 1.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block IDs

Aug 2, 2024🔧 No Patch
CVE-2024-4366
CVSS 6.4EPSS 0%medium

Spectra – WordPress Gutenberg Blocks <= 2.13.0 - Authenticated (Author+) Stored Cross-Site Scripting

May 24, 2024🔧 No Patch
CVE-2024-1814
CVSS 6.4medium

Spectra – WordPress Gutenberg Blocks <= 2.12.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Testimonial Block

May 23, 2024
CVE-2024-1815
CVSS 6.4medium

Spectra – WordPress Gutenberg Blocks <= 2.12.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Gallery Block

May 23, 2024
CVE-2024-3828
CVSS 8.8EPSS 0%high

Spectra Pro <= 1.1.5 - Authenticated (Author+) Privilege Escalation

May 10, 2024🔧 No Patch
CVE-2024-3107
CVSS 4.3medium

Spectra – WordPress Gutenberg Blocks <= 2.12.6 - Authenticated (Contributor+) Path Traversal

May 2, 2024

Monitor spectra in Real-Time

Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.

Powered bySecAlerts

Monitor Your Software Stack in Real-Time

Get instant alerts when vulnerabilities are discovered in your software stack. Stay ahead of security threats with SecAlerts.

© 2026 SecAlerts Pty Ltd. All rights reserved.