VulnSocial

CVE-2026-7465Disclosure

MEDIUMCVSS 8.8 · HIGH

Exploitation ongoing with high activity in latest observed window (1 mentions)

Immediate actions

  • Patch affected systems immediately
  • Assume compromise if assets are exposed

Recommended action window: Immediate (within 24h)

NVD description

The Spectra Gutenberg Blocks – Website Builder for the Block Editor plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.19.25. This makes it possible for authenticated attackers, with Contributor-level access and above, to execute code on the server. Exploitation requires a two-block payload embedded in post content: the first block registers a fake uagb/-prefixed block type with an attacker-specified render_callback, and the second block of the same fake type triggers invocation of that callback via call_user_func() during sequential block rendering in the same page request.

Back to dashboard
4.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-269

Priority

MEDIUM

Exploitation

ACTIVE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Active exploitation appears in 1 classified signals
  • Patch or workaround signal is available
  • 5 mentions across 4 observed days
  • Momentum state: stable

What's happening

  • Active exploitation reported across 1 signal
  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 5 signals
  • Disclosure: 2 classified signals
  • Peaked 3d ago at 2 mentions (2026-05-30); latest day: 1
  • 5 total mentions across 4 days

Deep dive

Activity timeline5 mentions / 4d
01122Mentions · 2026-05-30: 2Mentions · 2026-06-03: 1Mentions · 2026-06-11: 1Mentions · 2026-06-21: 1Active Exploitation · 2026-06-11: 1Patch / Workaround · 2026-06-03: 1Technical Details · 2026-05-30: 2Technical Details · 2026-06-03: 1Technical Details · 2026-06-11: 1Technical Details · 2026-06-21: 105-3006-0306-1106-21
Signal classification4 categories
Disclosure
240.0%
Patch
120.0%
Active Exploitation
120.0%
General
120.0%
Referenced assets4 URLs
Classification over time
DateTotalLabels
2026-05-302
Disclosure2
2026-06-031
Patch1
2026-06-111
Active Exploitation1
2026-06-211
General1
Full discourse5 posts
  • Threat Intelligence@threatintel
    Active Exploitation

    #ThreatProtection #CVE-2026-7465 - Spectra Gutenberg Blocks #RCE #vulnerability exploited in the wild, read more about Symantec's protection: https://www.broadcom.com/support/security-center/protection-bulletin/cve-2026-7465-spectra-gutenberg-blocks-rce-vulnerability

    Post summary

    The tweet highlights that CVE-2026-7465 (Spectra Gutenberg Blocks RCE) is actively exploited in the wild and directs readers to Symantec’s protection bulletin for more information.

    01010894
    115.2K followersView on X
  • IntegSec@integ_sec
    General

    CVE-2026-7465: Spectra Gutenberg Blocks RCE Vulnerability - What It Means for Your Business and How to Respond https://hubs.li/Q04m5gK70

    Post summary

    The article introduces CVE‑2026‑7465 as an RCE vulnerability in Spectra Gutenberg Blocks, but it offers neither exploit details nor mitigation guidance.

    0000036
    31 followersView on X
  • DFIR Lab@DFIR_Lab
    Patch

    🚨 HIGH SEVERITY: CVE-2026-7465 (CVSS 8.8) Spectra Gutenberg Blocks plugin for WordPress vulnerable to Remote Code Execution. Affects all versions ≤2.19.25. Authenticated attackers (Contributor+) can execute server code. Patch immediately! #CVE #Vulnerability #PatchNow https://t.co/nPMaQfAAQx

    Post summary

    The post announces a high‑severity CVE-2026‑7465 affecting Spectra Gutenberg Blocks that allows remote code execution, emphasizing the immediate need for patching.

    0000034
    35 followersView on X
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-7465 The Spectra Gutenberg Blocks – Website Builder for the Block Editor plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.… https://www.cve.org/CVERecord?id=CVE-2026-7465 ----- Traducción: CVE-2026-7465 El … http://infoflow.cloud`

    Post summary

    CVE‑2026‑7465 is disclosed as a remote code execution vulnerability in the Spectra Gutenberg Blocks WordPress plugin, affecting all versions up to 2. No PoC, exploit tool, or patch details are mentioned.

    0000037
    79 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-7465 The Spectra Gutenberg Blocks – Website Builder for the Block Editor plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.… https://www.cve.org/CVERecord?id=CVE-2026-7465

    Post summary

    The Spectra Gutenberg Blocks WordPress plugin is publicly disclosed as vulnerable to remote code execution in all versions up to 2, with no mention of PoCs, active exploitation, or available patches.

    00000212
    57.6K followersView on X

Explore more

Back to dashboard