CVE-2026-92294

Name of the Vulnerable Software and Affected Versions Spectra Gutenberg Blocks – Website Builder for the Block Editor versions prior to 2.20.5

Description Insufficient file path validation in the construct() function allows unauthenticated attackers to perform limited file deletion of theme files on the server.

Recommendations Update to version 2.20.5 or later. As a temporary workaround, restrict access to the construct() function to minimize the risk of exploitation.