Information Disclosure Vulnerability in Spectra Gutenberg Blocks for WordPress

CVE-2026-0950

What is CVE-2026-0950?

The Spectra Gutenberg Blocks plugin for WordPress is susceptible to an Information Disclosure vulnerability that affects all versions up to and including 2.19.17. The flaw originates from the plugin's failure to enforce proper checks with post_password_required() before displaying post excerpts. As a result, unauthenticated attackers can exploit this weakness to view excerpts of password-protected posts simply by accessing any page containing a Spectra Post Grid, Post Masonry, Post Carousel, or Post Timeline block. This creates a significant risk of sensitive content exposure.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References