Known vulnerabilities in Spectra Legacy – Gutenberg Blocks

Gutenberg blocks for existing Spectra websites. Maintained, stable, and fully supported — no action needed on your part.

31Reported vulnerabilities

8.8Highest CVSS score

2.20.1Latest version

1,000,000+Active installs

What to do now

Update Spectra Legacy – Gutenberg Blocks to 2.20.1 or later. 31 of these have a fixed version available. Updating resolves them.

Plugin last updated: July 31, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVE	Severity	Exploit probability next 30 days	Affected versions	Fixed in	Published
CVE-2023-6486	Medium 5.4	0.6%	Before 2.10.4	`2.10.4`	April 9, 2024
CVE-2020-36656	Medium 5.4	0.5%	Before 1.15.0	`1.15.0`	February 21, 2023
CVE-2026-7465	High 8.8	1.0%	0 to 2.19.25 (inclusive)	`2.19.26`	May 30, 2026
CVE-2023-36679	High 8.5	0.4%	2.6.6 and earlier	`2.6.7`	July 14, 2023
CVE-2020-36702	Medium 4.3	0.4%	1.14.7 and earlier	`1.14.8`	June 7, 2023
CVE-2026-12900	Medium 6.4	0.3%	0 to 2.19.28 (inclusive)	`2.19.29`	July 20, 2026
CVE-2025-1784	Medium 6.4	0.3%	0 to 2.19.0 (inclusive)	`2.19.1`	March 26, 2025
CVE-2024-7590	Medium 6.4	0.3%	2.15.0 and earlier	`2.15.1`	August 7, 2024
CVE-2023-23834	Medium 6.3	0.7%	2.3.1 and earlier	`2.3.2`	January 25, 2023
CVE-2023-23735	Medium 6.5	0.3%	2.3.1 and earlier	`2.3.2`	January 23, 2023
CVE-2025-11162	Medium 6.4	0.2%	0 to 2.19.14 (inclusive)	`2.19.15`	November 5, 2025
WF-b139260b-7741-4e35-b23f-896f23719739	Medium 6.4	—	2.6.6 and earlier	`2.6.7`	July 14, 2023
WF-242e99d1-db27-45fa-a90d-5a26c2d1901b	Medium 6.3	—	2.3.1 and earlier	`2.3.2`	January 25, 2023
WF-099c8e23-31e3-47de-a33a-fe5812ca14d3	Medium 6.1	—	1.25.5 and earlier	`1.25.6`	May 31, 2022
CVE-2024-10484	Medium 5.4	0.3%	Before 2.16.3	`2.16.3`	December 3, 2024
CVE-2024-4366	Medium 5.4	0.3%	Before 2.13.1	`2.13.1`	May 24, 2024
CVE-2024-1815	Medium 5.4	0.3%	Before 2.12.9	`2.12.9`	May 23, 2024
CVE-2024-1814	Medium 5.4	0.3%	Before 2.12.9	`2.12.9`	May 23, 2024
CVE-2023-49833	Medium 5.4	0.6%	Before 2.7.10	`2.7.10`	December 14, 2023
CVE-2023-23825	Medium 5.4	0.5%	2.3.1 and earlier	`2.3.2`	January 23, 2023
CVE-2023-23729	Medium 5.4	0.3%	2.3.1 and earlier	`2.3.2`	January 23, 2023
CVE-2026-0950	Medium 5.3	0.4%	0 to 2.19.17 (inclusive)	`2.19.18`	February 3, 2026
CVE-2026-24982	Medium 5.3	0.3%	2.19.17 and earlier	`2.19.18`	January 17, 2026
CVE-2023-23738	Medium 5.3	0.3%	2.3.1 and earlier	`2.3.2`	January 23, 2023
CVE-2023-23730	Medium 5.3	0.4%	2.3.1 and earlier	`2.3.2`	January 23, 2023
CVE-2024-3107	Medium 4.3	0.6%	Before 2.12.7	`2.12.7`	May 2, 2024
CVE-2026-16302	Medium 4.3	0.2%	2.20.0 and earlier	`2.20.1`	September 23, 2026
CVE-2026-10827	Medium 4.3	0.2%	Before 2.20.0	`2.20.0`	July 20, 2026
CVE-2026-42648	Medium 4.3	0.3%	2.19.22 and earlier	`2.19.23`	March 27, 2026
CVE-2024-37517	Medium 4.3	0.4%	2.13.7 and earlier	`2.13.8`	July 5, 2024
CVE-2023-36676	Medium 4.3	0.5%	2.6.6 and earlier	`2.6.7`	July 14, 2023

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.