CVE-2026-92294

The Spectra Gutenberg Blocks WordPress plugin (all versions up to and including 2.20.4 ) is vulnerable to limited file deletion due to insufficient file path validation in the __construct function. This Missing Authorization vulnerability allows unauthenticated attackers to delete theme files on ...