Advisories · Technology

brainstormforce Spectra Legacy – Gutenberg Blocks.

Every CVE that names brainstormforce Spectra Legacy – Gutenberg Blocks among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-92294 CVE record

CVSS 6.5 Medium

Spectra Gutenberg Blocks <= 2.20.4 - Missing Authorization to Unauthenticated Limited Theme File Deletion and Modification via 'page', 'path', and 'settings' GET Parameters
- brainstormforce Spectra Legacy – Gutenberg Blocks
- Broken access control
Not analysed yet 31 Oct 2026
CVE-2026-16302 CVE record

CVSS 4.3 Medium

Spectra Legacy – Gutenberg Blocks <= 2.20.0 - Authenticated (Contributor+) Sensitive Information Exposure
- brainstormforce Spectra Legacy – Gutenberg Blocks
- Information disclosure
Not analysed yet 24 Sept 2026
CVE-2026-12900 CVE record

CVSS 6.4 Medium

Spectra Gutenberg Blocks <= 2.19.28 - Authenticated (Contributor+) Stored Cross-Site Scripting via uagb/image Block
- brainstormforce Spectra Legacy – Gutenberg Blocks
- Cross-site scripting (XSS)
Not analysed yet 20 Jul 2026