Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The Spectra Gutenberg Blocks – Website Builder for the Block Editor plugin for WordPress is vulnerable to Information Disclosure in all versions up to, and including, 2.19.17. This is due to the plugin failing to check `post_password_required()` before rendering post excerpts in the `render_excerpt()` function and the `uagb_get_excerpt()` helper function. This makes it possible for unauthenticated attackers to read excerpts of password-protected posts by simply viewing any page that contains a Spectra Post Grid, Post Masonry, Post Carousel, or Post Timeline block.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-0950 The Spectra Gutenberg Blocks – Website Builder for the Block Editor plugin for WordPress is vulnerable to Information Disclosure in all versions up to, and including, 2… https://www.cve.org/CVERecord?id=CVE-2026-0950
Post summary
The post cites CVE-2026-0950, indicating an Information Disclosure vulnerability in the Spectra Gutenberg Blocks WordPress plugin up to version 2, but provides no PoC, exploit code, or patch details.
CVE-2026-0950 Information Disclosure Vulnerability in Spectra Gutenberg Blocks WordPress Plugin https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-0950
Post summary
The post announces CVE-2026-0950, an information disclosure flaw in the Spectra Gutenberg Blocks WordPress plugin, providing the vulnerability type and a link to details but no PoC, exploit, or patch information.