CVE-2026-10827

The Spectra Legacy WordPress plugin versions prior to 2.20.0 is vulnerable to stored CSS injection . The software fails to validate or escape several block style attributes when constructing the CSS output for the front end, allowing users with the Contributor role or higher to inject arbitrary C...