Stored Cross-Site Scripting Vulnerability in Spectra Gutenberg Blocks for WordPress

CVE-2025-11162

What is CVE-2025-11162?

The Spectra Gutenberg Blocks plugin for WordPress is susceptible to a Stored Cross-Site Scripting (XSS) vulnerability. This issue arises due to inadequate input sanitization and output escaping mechanisms in the Custom CSS functionality. Authenticated users with Contributor-level access or higher can exploit this weakness by injecting arbitrary web scripts into web pages. Once an injected page is accessed by users, the malicious scripts will execute, posing serious security risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References