CVE-2026-7465

The Spectra Gutenberg Blocks plugin for WordPress contains a vulnerability that allows attackers to execute arbitrary code on the server. This flaw affects all versions up to 2.19.25, and can be exploited by authenticated users with Contributor-level access or higher. To trigger the vulnerability, an attacker must insert two specific blocks into post content: one registers a custom block type, while the other triggers its associated callback function during rendering.

Based on public CVE data (MITRE/NVD).