CVE-2026-7465 | brainstormforce Spectra Gutenberg Blocks Plugin up to 2.19.25 on WordPress call_user_func render_callback privileges management

A vulnerability identified as critical has been detected in brainstormforce Spectra Gutenberg Blocks Plugin up to 2.19.25 on WordPress. This vulnerability affects the function call_user_func. Performing a manipulation of the argument render_callback results in improper privilege management.

This vulnerability is known as CVE-2026-7465. Remote exploitation of the attack is possible. No exploit is available.

You should upgrade the affected component.