WP Vulnerability WatchVulnerability data as of September 7, 2026

Known vulnerabilities in Spectra Legacy – Gutenberg Blocks

Gutenberg blocks for existing Spectra websites. Maintained, stable, and fully supported — no action needed on your part.

26Reported vulnerabilities
8.8Highest CVSS score
2.20.1Latest version
1,000,000+Active installs

What to do now

Update Spectra Legacy – Gutenberg Blocks to 2.19.29 or later. 26 of these have a fixed version available. Updating resolves them.

Plugin last updated: July 31, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVESeverityExploit probability
next 30 days		 Affected versionsFixed inPublished
CVE-2026-7465 High 8.8 1.2% 0 to 2.19.25 (inclusive) 2.19.26 May 30, 2026
CVE-2023-36679 High 8.5 0.4% 2.6.6 and earlier 2.6.7 July 14, 2023
CVE-2026-12900 Medium 6.4 0.3% 0 to 2.19.28 (inclusive) 2.19.29 July 20, 2026
CVE-2025-1784 Medium 6.4 0.3% 0 to 2.19.0 (inclusive) 2.19.1 March 26, 2025
CVE-2024-7590 Medium 6.4 0.3% 2.15.0 and earlier 2.15.1 August 7, 2024
CVE-2023-23834 Medium 6.3 0.6% 2.3.1 and earlier 2.3.2 January 25, 2023
CVE-2023-23735 Medium 6.5 0.3% 2.3.1 and earlier 2.3.2 January 23, 2023
CVE-2025-11162 Medium 6.4 0.2% 0 to 2.19.14 (inclusive) 2.19.15 November 5, 2025
WF-b139260b-7741-4e35-b23f-896f23719739 Medium 6.4 — 2.6.6 and earlier 2.6.7 July 14, 2023
WF-242e99d1-db27-45fa-a90d-5a26c2d1901b Medium 6.3 — 2.3.1 and earlier 2.3.2 January 25, 2023
WF-099c8e23-31e3-47de-a33a-fe5812ca14d3 Medium 6.1 — 1.25.5 and earlier 1.25.6 May 31, 2022
CVE-2024-10484 Medium 5.4 0.3% Before 2.16.3 2.16.3 December 3, 2024
CVE-2024-1815 Medium 5.4 0.3% Before 2.12.9 2.12.9 May 23, 2024
CVE-2024-1814 Medium 5.4 0.3% Before 2.12.9 2.12.9 May 23, 2024
CVE-2023-49833 Medium 5.4 0.6% Before 2.7.10 2.7.10 December 14, 2023
CVE-2023-23825 Medium 5.4 0.5% 2.3.1 and earlier 2.3.2 January 23, 2023
CVE-2023-23729 Medium 5.4 0.3% 2.3.1 and earlier 2.3.2 January 23, 2023
CVE-2026-0950 Medium 5.3 0.4% 0 to 2.19.17 (inclusive) 2.19.18 February 3, 2026
CVE-2026-24982 Medium 5.3 0.2% 2.19.17 and earlier 2.19.18 January 17, 2026
CVE-2023-23738 Medium 5.3 0.3% 2.3.1 and earlier 2.3.2 January 23, 2023
CVE-2023-23730 Medium 5.3 0.4% 2.3.1 and earlier 2.3.2 January 23, 2023
CVE-2024-3107 Medium 4.3 0.6% Before 2.12.7 2.12.7 May 2, 2024
CVE-2026-10827 Medium 4.3 0.1% Before 2.20.0 2.20.0 July 20, 2026
CVE-2026-42648 Medium 4.3 0.2% 2.19.22 and earlier 2.19.23 March 27, 2026
CVE-2024-37517 Medium 4.3 0.4% 2.13.7 and earlier 2.13.8 July 5, 2024
CVE-2023-36676 Medium 4.3 0.5% 2.6.6 and earlier 2.6.7 July 14, 2023

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.