WP-Safety

Spectra Legacy – Gutenberg Blocks Security & Risk Analysis

wordpress.org/plugins/ultimate-addons-for-gutenberg

Gutenberg blocks for existing Spectra websites. Maintained, stable, and fully supported — no action needed on your part.

1.0M active installs v2.20.0 PHP 7.4+ WP 5.6+ Updated Jul 14, 2026
blockblockseditorgutenberggutenberg-blocks
89
A · Safe
CVEs total28
Unpatched0
Last CVEMay 29, 2026
Plugin page Download
Safety Verdict

Is Spectra Legacy – Gutenberg Blocks Safe to Use in 2026?

Generally Safe

Score 89/100

Spectra Legacy – Gutenberg Blocks has a strong security track record. Known vulnerabilities have been patched promptly. It's a solid choice for most WordPress installations.

28 known CVEsLast CVE: May 29, 2026Updated 1mo ago
Risk Assessment

This analysis of Ultimate Addons for Gutenberg v2.19.21 reveals a mixed security posture. While the plugin demonstrates strong adherence to some security best practices, such as using prepared statements for all SQL queries and a high percentage of properly escaped output, significant concerns remain regarding its attack surface and historical vulnerability patterns. The presence of 6 unprotected entry points across AJAX handlers and REST API routes is a notable weakness, potentially exposing the plugin to unauthorized access and actions. The taint analysis, though limited in scope, did identify one flow with unsanitized paths, which warrants further investigation as it could lead to path traversal vulnerabilities. The plugin's extensive vulnerability history, with 26 known CVEs encompassing a wide range of attack vectors like information exposure, path traversal, SSRF, CSRF, and XSS, suggests a pattern of recurring security flaws. The fact that there are currently no unpatched vulnerabilities is a positive sign, but the sheer volume and variety of past issues indicate a need for rigorous and ongoing security auditing.

Key Concerns

  • Unprotected AJAX handlers (3)
  • Unprotected REST API routes (3)
  • Taint flow with unsanitized paths (1)
  • High historical vulnerability count (26)
  • One high severity historical CVE
Vulnerabilities
28 published

Spectra Legacy – Gutenberg Blocks Security Vulnerabilities

CVEs by Year

1 CVE in 2020
2020
1 CVE in 2022
2022
12 CVEs in 2023
2023
8 CVEs in 2024
2024
2 CVEs in 2025
2025
4 CVEs in 2026
2026
Patched Has unpatched

Severity Breakdown

High
2
Medium
26

28 total CVEs

CVE-2026-7465high · 8.8Improper Privilege Management

Spectra Gutenberg Blocks <= 2.19.25 - Authenticated (Contributor+) Remote Code Execution via Arbitrary PHP Function Call via Block Attributes

May 29, 2026 Patched in 2.19.26 (1d)
CVE-2026-42648medium · 4.3Missing Authorization

Spectra <= 2.19.22 - Missing Authorization

Mar 27, 2026 Patched in 2.19.23 (42d)
CVE-2026-0950medium · 5.3Exposure of Sensitive Information to an Unauthorized Actor

Spectra Gutenberg Blocks <= 2.19.17 - Unauthenticated Information Disclosure in Sensitive Data

Feb 2, 2026 Patched in 2.19.18 (1d)
CVE-2026-24982medium · 5.3Missing Authorization

Spectra <= 2.19.17 - Missing Authorization

Jan 17, 2026 Patched in 2.19.18 (25d)
CVE-2025-11162medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Spectra <= 2.19.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom CSS

Nov 4, 2025 Patched in 2.19.15 (1d)
CVE-2025-1784medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Spectra – WordPress Gutenberg Blocks <= 2.19.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

Mar 25, 2025 Patched in 2.19.1 (99d)
CVE-2024-10484medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Spectra – WordPress Gutenberg Blocks <= 2.16.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Team Widget

Dec 2, 2024 Patched in 2.16.3 (1d)
CVE-2024-7590medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Spectra – WordPress Gutenberg Blocks <= 2.15.0 - Authenticated (Contributor+) Stored Cross-site Scripting

Aug 7, 2024 Patched in 2.15.1 (8d)
CVE-2024-37517medium · 4.3Missing Authorization

Spectra <= 2.13.7 - Missing Authorization via generate_ai_content

Jul 5, 2024 Patched in 2.13.8 (6d)
CVE-2024-4366medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Spectra – WordPress Gutenberg Blocks <= 2.13.0 - Authenticated (Author+) Stored Cross-Site Scripting

May 23, 2024 Patched in 2.13.1 (1d)
CVE-2024-1815medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Spectra – WordPress Gutenberg Blocks <= 2.12.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Gallery Block

May 22, 2024 Patched in 2.12.9 (1d)
CVE-2024-1814medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Spectra – WordPress Gutenberg Blocks <= 2.12.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Testimonial Block

May 22, 2024 Patched in 2.12.9 (1d)
CVE-2024-3107medium · 4.3Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Spectra – WordPress Gutenberg Blocks <= 2.12.6 - Authenticated (Contributor+) Path Traversal

Apr 26, 2024 Patched in 2.12.7 (7d)
CVE-2023-6486medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Spectra – WordPress Gutenberg Blocks <= 2.10.3 - Authenticated(Contributor+) Cross-Site Scripting via Custom CSS

Apr 3, 2024 Patched in 2.10.4 (118d)
CVE-2023-49833medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Spectra <= 2.7.9 - Authenticated (Contributor+) Stored Cross-Site Scripting

Dec 5, 2023 Patched in 2.7.10 (49d)
CVE-2023-36679high · 8.5Server-Side Request Forgery (SSRF)

Spectra <= 2.6.6 - Authenticated (Contributor+) Server-Side Request Forgery in import_wpforms

Jul 14, 2023 Patched in 2.6.7 (193d)
CVE-2023-36676medium · 4.3Missing Authorization

Spectra <= 2.6.6 - Missing Authorization

Jul 14, 2023 Patched in 2.6.7 (344d)
WF-b139260b-7741-4e35-b23f-896f23719739-ultimate-addons-for-gutenbergmedium · 6.4Server-Side Request Forgery (SSRF)

Spectra <= 2.6.6 - Authenticated (Contributor+) Server-Side Request Forgery in template_importer

Jul 14, 2023 Patched in 2.6.7 (193d)
CVE-2023-23834medium · 6.3Cross-Site Request Forgery (CSRF)

Spectra – WordPress Gutenberg Blocks <= 2.3.1 - Cross-Site Request Forgery to Plugin Activation

Jan 25, 2023 Patched in 2.3.2 (363d)
WF-242e99d1-db27-45fa-a90d-5a26c2d1901b-ultimate-addons-for-gutenbergmedium · 6.3Missing Authorization

Spectra – WordPress Gutenberg Blocks <= 2.3.1 - Missing Authorization Checks

Jan 25, 2023 Patched in 2.3.2 (363d)
CVE-2020-36656medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Spectra – WordPress Gutenberg Blocks <= 1.14.11 - Authenticated (Contributor+) Stored Cross-Site Scripting

Jan 24, 2023 Patched in 1.15.0 (640d)
CVE-2023-23825medium · 5.4Cross-Site Request Forgery (CSRF)

Spectra – WordPress Gutenberg Blocks <= 2.3.1 - Cross-Site Request Forgery to WPForm/Blocks Import

Jan 23, 2023 Patched in 2.3.2 (365d)
CVE-2023-23729medium · 5.4Missing Authorization

Spectra – WordPress Gutenberg Blocks <= 2.3.1 - Missing Authorization to Captcha Setting Update

Jan 23, 2023 Patched in 2.3.2 (365d)
CVE-2023-23735medium · 6.5Improper Input Validation

Spectra – WordPress Gutenberg Blocks <= 2.3.1 - HTML Injection in Emails

Jan 23, 2023 Patched in 2.3.2 (365d)
CVE-2023-23738medium · 5.3Insufficient Verification of Data Authenticity

Spectra – WordPress Gutenberg Blocks <= 2.3.1 - Email Spoofing

Jan 23, 2023 Patched in 2.3.2 (365d)
CVE-2023-23730medium · 5.3Guessable CAPTCHA

Spectra – WordPress Gutenberg Blocks <= 2.3.1 - Captcha Bypass

Jan 23, 2023 Patched in 2.3.2 (365d)
WF-099c8e23-31e3-47de-a33a-fe5812ca14d3-ultimate-addons-for-gutenbergmedium · 6.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Spectra – WordPress Gutenberg Blocks <= 1.25.5 - Reflected Cross-Site Scripting

May 31, 2022 Patched in 1.25.6 (602d)
CVE-2020-36702medium · 5.5Missing Authorization

Spectra – WordPress Gutenberg Blocks <= 1.14.7 - Missing Authorization

Mar 30, 2020 Patched in 1.14.8 (1394d)
Version History

Spectra Legacy – Gutenberg Blocks Release Timeline

v3.0.0-beta.2363 files changed
v3.0.0-beta.1691 files changed
v2.20.0Current
v2.19.29
v2.19.28
v2.19.27
v2.19.26
v2.19.251 CVE
CVE-2026-7465
v2.19.241 CVE
CVE-2026-7465
v2.19.231 CVE
CVE-2026-7465
v2.19.222 CVEs16 files changed
CVE-2026-42648 CVE-2026-7465
v2.19.212 CVEs19 files changed
CVE-2026-42648 CVE-2026-7465
v2.19.202 CVEs8 files changed
CVE-2026-42648 CVE-2026-7465
v2.19.192 CVEs17 files changed
CVE-2026-42648 CVE-2026-7465
v2.19.182 CVEs8 files changed
CVE-2026-42648 CVE-2026-7465
v2.19.174 CVEs10 files changed
CVE-2026-0950 CVE-2026-24982 CVE-2026-42648 +1 more
v2.19.164 CVEs61 files changed
CVE-2026-0950 CVE-2026-24982 CVE-2026-42648 +1 more
v2.19.154 CVEs5 files changed
CVE-2026-0950 CVE-2026-24982 CVE-2026-42648 +1 more
v2.19.145 CVEs4 files changed
CVE-2025-11162 CVE-2026-0950 CVE-2026-24982 +2 more
v2.19.135 CVEs7 files changed
CVE-2025-11162 CVE-2026-0950 CVE-2026-24982 +2 more
Code Analysis
Analyzed Mar 16, 2026

Spectra Legacy – Gutenberg Blocks Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
2 prepared
Unescaped Output
60
691 escaped
Nonce Checks
23
Capability Checks
36
File Operations
17
External Requests
5
Bundled Libraries
0

SQL Query Safety

100% prepared2 total queries

Output Escaping

92% escaped751 total outputs
Data Flows · Security
1 unsanitized

Data Flow Analysis

4 flows1 with unsanitized paths
<class-uagb-post> (blocks-config\post\class-uagb-post.php:0)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface
6 unprotected

Spectra Legacy – Gutenberg Blocks Attack Surface

Entry Points34
Unprotected6

AJAX Handlers 30

authwp_ajax_uagb_recommended_plugin_activateadmin-core\inc\admin-menu.php:91
authwp_ajax_uagb_recommended_plugin_installadmin-core\inc\admin-menu.php:92
authwp_ajax_uagb_recommended_theme_installadmin-core\inc\admin-menu.php:93
authwp_ajax_uagb_process_formsblocks-config\forms\class-uagb-forms.php:55
noprivwp_ajax_uagb_process_formsblocks-config\forms\class-uagb-forms.php:56
authwp_ajax_uag_load_image_gallery_masonryblocks-config\image-gallery\class-spectra-image-gallery.php:52
noprivwp_ajax_uag_load_image_gallery_masonryblocks-config\image-gallery\class-spectra-image-gallery.php:53
authwp_ajax_uag_load_image_gallery_grid_paginationblocks-config\image-gallery\class-spectra-image-gallery.php:54
noprivwp_ajax_uag_load_image_gallery_grid_paginationblocks-config\image-gallery\class-spectra-image-gallery.php:55
authwp_ajax_uagb_post_paginationblocks-config\post\class-uagb-post.php:53
noprivwp_ajax_uagb_post_paginationblocks-config\post\class-uagb-post.php:54
authwp_ajax_uagb_post_pagination_gridblocks-config\post\class-uagb-post.php:55
noprivwp_ajax_uagb_post_pagination_gridblocks-config\post\class-uagb-post.php:56
authwp_ajax_uagb_get_postsblocks-config\post\class-uagb-post.php:57
noprivwp_ajax_uagb_get_postsblocks-config\post\class-uagb-post.php:58
authwp_ajax_uag_migrateclasses\class-uagb-admin.php:54
authwp_ajax_uagb_get_taxonomyclasses\class-uagb-init-blocks.php:61
authwp_ajax_uagb_gf_shortcodeclasses\class-uagb-init-blocks.php:63
noprivwp_ajax_uagb_gf_shortcodeclasses\class-uagb-init-blocks.php:64
authwp_ajax_uagb_cf7_shortcodeclasses\class-uagb-init-blocks.php:66
noprivwp_ajax_uagb_cf7_shortcodeclasses\class-uagb-init-blocks.php:67
authwp_ajax_uagb_forms_recaptchaclasses\class-uagb-init-blocks.php:69
authwp_ajax_uag_global_block_stylesclasses\class-uagb-init-blocks.php:72
authwp_ajax_uag_global_sidebar_enabledclasses\class-uagb-init-blocks.php:74
authwp_ajax_uag_global_update_allowed_blockclasses\class-uagb-init-blocks.php:75
authwp_ajax_uagb_svg_confirmationclasses\class-uagb-init-blocks.php:85
authwp_ajax_uagb_sureformsclasses\class-uagb-init-blocks.php:93
authwp_ajax_uagb_surecartclasses\class-uagb-init-blocks.php:94
authwp_ajax_uag_update_popup_statusclasses\class-uagb-init-blocks.php:213
authwp_ajax_check_migration_statusclasses\migration\class-spectra-migrate-blocks.php:96

REST API Routes 3

GET/wp-json/spectra/v1all_taxonomyclasses\class-uagb-rest-api.php:207
GET/wp-json/spectra/v1editorclasses\class-uagb-rest-api.php:220
GET/wp-json/spectra/v1check-custom-fields-supportclasses\class-uagb-rest-api.php:233

Shortcodes 1

[spectra_popup] blocks-config\popup-builder\class-uagb-popup-builder.php:51
WordPress Hooks 122
filteruag_react_admin_localizeadmin-core\ajax\ajax-base.php:73
actioninitadmin-core\ajax\ajax-errors.php:65
actionrest_api_initadmin-core\api\api-init.php:68
actionadmin_menuadmin-core\inc\admin-menu.php:76
actionadmin_initadmin-core\inc\admin-menu.php:77
filteradmin_footer_textadmin-core\inc\admin-menu.php:78
actionuag_render_admin_page_contentadmin-core\inc\admin-menu.php:89
actionadmin_enqueue_scriptsadmin-core\inc\admin-menu.php:327
filteruagb_render_blockblocks-config\advanced-settings\class-uagb-block-positioning.php:51
actioninitblocks-config\buttons-child\class-uagb-buttons-child.php:49
actioninitblocks-config\cf7-styler\class-uagb-cf7-styler.php:42
actioninitblocks-config\faq\class-uagb-faq.php:49
actioninitblocks-config\gf-styler\class-uagb-gf-styler.php:42
actioninitblocks-config\google-map\class-uagb-google-map.php:44
actioninitblocks-config\icon\class-spectra-icon.php:49
actioninitblocks-config\image\class-uagb-image.php:45
actioninitblocks-config\image-gallery\class-spectra-image-gallery.php:51
filterimagify_allow_picture_tags_for_nextgenblocks-config\image-gallery\class-spectra-image-gallery.php:58
actioninitblocks-config\lottie\class-uagb-lottie.php:49
actionspectra_after_menu_registerblocks-config\popup-builder\class-uagb-popup-builder.php:64
actionwp_enqueue_scriptsblocks-config\popup-builder\class-uagb-popup-builder.php:77
actionwp_body_openblocks-config\popup-builder\class-uagb-popup-builder.php:200
actioninitblocks-config\post\class-uagb-post.php:52
actionwp_footerblocks-config\post\class-uagb-post.php:59
filterredirect_canonicalblocks-config\post\class-uagb-post.php:60
actioninitblocks-config\post-timeline\class-uagb-post-timeline.php:53
actioninitblocks-config\table-of-content\class-uagb-table-of-content.php:45
actionsave_postblocks-config\table-of-content\class-uagb-table-of-content.php:46
filterrender_block_datablocks-config\table-of-content\class-uagb-table-of-content.php:47
actioninitblocks-config\taxonomy-list\class-uagb-taxonomy-list.php:49
actionupdate_option_spectra_usage_optinclasses\analytics\class-uagb-block-analytics.php:79
actionadd_option_spectra_usage_optinclasses\analytics\class-uagb-block-analytics.php:80
actioninitclasses\analytics\class-uagb-block-analytics.php:83
actionsave_postclasses\analytics\class-uagb-incremental-block-tracker.php:158
actionbefore_delete_postclasses\analytics\class-uagb-incremental-block-tracker.php:159
actionwp_trash_postclasses\analytics\class-uagb-incremental-block-tracker.php:160
actionuntrash_postclasses\analytics\class-uagb-incremental-block-tracker.php:161
filterast_block_templates_exclude_post_typesclasses\class-uagb-admin-helper.php:441
filterzipwp_images_excluded_post_typesclasses\class-uagb-admin-helper.php:449
actionadmin_enqueue_scriptsclasses\class-uagb-admin.php:52
actionadmin_noticesclasses\class-uagb-admin.php:56
filterwp_kses_allowed_htmlclasses\class-uagb-admin.php:57
actionadmin_enqueue_scriptsclasses\class-uagb-admin.php:58
actionadmin_enqueue_scriptsclasses\class-uagb-admin.php:59
filterrank_math/researches/toc_pluginsclasses\class-uagb-admin.php:60
actionadmin_initclasses\class-uagb-admin.php:61
actionadmin_initclasses\class-uagb-admin.php:62
actionadmin_post_uag_rollbackclasses\class-uagb-admin.php:63
filterast_block_templates_pro_urlclasses\class-uagb-admin.php:65
actionadmin_post_uag_download_logclasses\class-uagb-admin.php:66
filterpre_set_site_transient_update_pluginsclasses\class-uagb-beta-updates.php:62
filteruag_register_block_static_dependenciesclasses\class-uagb-block-module.php:57
actionuagb_delete_uag_asset_dirclasses\class-uagb-caching.php:51
actionuagb_delete_page_assetsclasses\class-uagb-caching.php:52
filterfilesystem_methodclasses\class-uagb-filesystem.php:53
filterrequest_filesystem_credentialsclasses\class-uagb-filesystem.php:54
actionwpclasses\class-uagb-front-assets.php:59
actionwp_enqueue_scriptsclasses\class-uagb-front-assets.php:60
actionspectra_regenerate_post_assetsclasses\class-uagb-front-assets.php:61
actionwp_insert_postclasses\class-uagb-front-assets.php:62
actionadmin_initclasses\class-uagb-fse-fonts-compatibility.php:110
actioninitclasses\class-uagb-helper.php:163
actionenqueue_block_editor_assetsclasses\class-uagb-init-blocks.php:53
filterblock_categories_allclasses\class-uagb-init-blocks.php:56
filterblock_categoriesclasses\class-uagb-init-blocks.php:58
actionrender_blockclasses\class-uagb-init-blocks.php:78
filterrender_blockclasses\class-uagb-init-blocks.php:81
actioninitclasses\class-uagb-init-blocks.php:88
filtersrfm_enable_redirect_activationclasses\class-uagb-init-blocks.php:89
filteradmin_body_classclasses\class-uagb-init-blocks.php:91
actionadmin_enqueue_scriptsclasses\class-uagb-init-blocks.php:212
filtermanage_spectra-popup_posts_columnsclasses\class-uagb-init-blocks.php:217
actionmanage_spectra-popup_posts_custom_columnclasses\class-uagb-init-blocks.php:218
filterrest_spectra-popup_queryclasses\class-uagb-init-blocks.php:221
filterrest_prepare_spectra-popupclasses\class-uagb-init-blocks.php:222
filterrest_authentication_errorsclasses\class-uagb-init-blocks.php:223
actionafter_setup_themeclasses\class-uagb-loader.php:77
actionplugins_loadedclasses\class-uagb-loader.php:79
actioninitclasses\class-uagb-loader.php:81
filterbsf_core_statsclasses\class-uagb-loader.php:121
filterrest_pre_dispatchclasses\class-uagb-loader.php:245
filterzip_ai_library_textdomainclasses\class-uagb-loader.php:250
filterast_block_templates_disableclasses\class-uagb-loader.php:255
filterzip_ai_collab_product_detailsclasses\class-uagb-loader.php:259
filterzip_ai_modulesclasses\class-uagb-loader.php:260
filterzip_ai_auth_redirection_flagclasses\class-uagb-loader.php:261
filterzip_ai_auth_redirection_urlclasses\class-uagb-loader.php:262
filterzip_ai_revoke_redirection_urlclasses\class-uagb-loader.php:263
actionadmin_noticesclasses\class-uagb-loader.php:498
filterexcerpt_allowed_blocksclasses\class-uagb-loader.php:544
filterexcerpt_allowed_wrapper_blocksclasses\class-uagb-loader.php:545
filteruagb_blocks_allowed_in_excerptclasses\class-uagb-loader.php:546
actionadmin_footerclasses\class-uagb-nps-notice.php:50
actionwp_headclasses\class-uagb-post-assets.php:742
actionwp_headclasses\class-uagb-post-assets.php:781
actionwp_footerclasses\class-uagb-post-assets.php:785
actionwp_headclasses\class-uagb-post-assets.php:790
actionrest_api_initclasses\class-uagb-rest-api.php:42
actioninitclasses\class-uagb-rest-api.php:43
filterregister_post_type_argsclasses\class-uagb-rest-api.php:44
actionsave_postclasses\class-uagb-rest-api.php:47
actionwp_trash_postclasses\class-uagb-rest-api.php:49
filterrender_block_dataclasses\class-uagb-rest-api.php:52
actioncustomize_saveclasses\class-uagb-rest-api.php:53
actionrest_after_save_widgetclasses\class-uagb-rest-api.php:55
actionwpclasses\class-uagb-twenty-seventeen-compatibility.php:40
actionadmin_initclasses\class-uagb-update.php:43
actionadmin_enqueue_scriptsclasses\class-uagb-update.php:44
actiontemplate_redirectclasses\class-uagb-visibility.php:48
filtertemplate_includeclasses\class-uagb-visibility.php:49
actionwp_enqueue_scriptsclasses\class-uagb-visibility.php:50
actionspectra_blocks_migration_eventclasses\migration\class-spectra-migrate-blocks.php:94
actionadmin_initclasses\migration\class-spectra-migrate-blocks.php:95
actionadmin_footerclasses\migration\class-spectra-migrate-blocks.php:100
filterwp_insert_post_dataclasses\migration\class-uagb-background-process.php:99
filterastra_menu_prioritycompatibility\class-uagb-astra-compatibility.php:42
filteruagb_enqueue_google_fontscompatibility\class-uagb-astra-compatibility.php:53
filterastra_google_fonts_selectedcompatibility\class-uagb-astra-compatibility.php:56
actionwpcompatibility\class-uagb-twenty-sixteen-compatibility.php:44
actionwpcompatibility\class-uagb-twenty-twenty-two-compatibility.php:40
actionadmin_noticesultimate-addons-for-gutenberg.php:22
actionadmin_noticesultimate-addons-for-gutenberg.php:24

Scheduled Events 2

spectra_regenerate_post_assets
spectra_blocks_migration_event
Maintenance & Trust

Spectra Legacy – Gutenberg Blocks Maintenance & Trust

Maintenance Signals

WordPress version tested7.0.2
Last updatedJul 14, 2026
PHP min version7.4
Downloads42.4M

Community Trust

Rating94/100
Number of ratings1,869
Active installs1.0M
Alternatives

Spectra Legacy – Gutenberg Blocks Alternatives

Kadence Blocks — Page Builder Toolkit for Gutenberg Editor

Kadence Blocks — Page Builder Toolkit for Gutenberg Editor

kadence-blocks

A
86

20+ Gutenberg Blocks with endless options, enabling top-notch efficiency for high-performance dynamic website creation.

600K 36 CVEs
Page Builder: Pagelayer – Drag and Drop website builder

Page Builder: Pagelayer – Drag and Drop website builder

pagelayer

A
88

The most advanced frontend drag & drop page builder. Pagelayer is a light weight but extremely powerful Website Builder.

400K 30 CVEs
GutenKit – Page Builder Blocks, Patterns, and Templates for Gutenberg Block Editor

GutenKit – Page Builder Blocks, Patterns, and Templates for Gutenberg Block Editor

gutenkit-blocks-addon

A
93

GutenKit – Ultimate no-code Gutenberg blocks to design stunning web pages and visually stunning posts in WordPress block editor.

80K 3 CVEs
Getwid – Gutenberg Blocks

Getwid – Gutenberg Blocks

getwid

A
94

40+ Gutenberg Blocks, plus multiple pre-made free block templates for the WordPress block editor.

50K 11 CVEs
Ultimate Blocks – 25+ Gutenberg Blocks for Block Editor

Ultimate Blocks – 25+ Gutenberg Blocks for Block Editor

ultimate-blocks

A
97

Create Better Content With The Block Editor. Custom Blocks for Bloggers and Content Marketers.

50K 14 CVEs
Developer Profile

Spectra Legacy – Gutenberg Blocks Developer Profile

Brainstorm Force

36 plugins · 7.8M total installs

77
trust score
Avg Security Score
97/100
Avg Patch Time
180 days
View full developer profile
Detection Fingerprints

How We Detect Spectra Legacy – Gutenberg Blocks

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/ultimate-addons-for-gutenberg/assets/css/common.css/wp-content/plugins/ultimate-addons-for-gutenberg/assets/css/main.css/wp-content/plugins/ultimate-addons-for-gutenberg/assets/js/common.js/wp-content/plugins/ultimate-addons-for-gutenberg/assets/js/main.js/wp-content/plugins/ultimate-addons-for-gutenberg/admin-core/assets/css/admin-menu.css/wp-content/plugins/ultimate-addons-for-gutenberg/admin-core/assets/js/admin-menu.js
Script Paths
/wp-content/plugins/ultimate-addons-for-gutenberg/assets/js/common.js/wp-content/plugins/ultimate-addons-for-gutenberg/assets/js/main.js/wp-content/plugins/ultimate-addons-for-gutenberg/admin-core/assets/js/admin-menu.js
Version Parameters
ultimate-addons-for-gutenberg/assets/css/common.css?ver=ultimate-addons-for-gutenberg/assets/css/main.css?ver=ultimate-addons-for-gutenberg/assets/js/common.js?ver=ultimate-addons-for-gutenberg/assets/js/main.js?ver=ultimate-addons-for-gutenberg/admin-core/assets/css/admin-menu.css?ver=ultimate-addons-for-gutenberg/admin-core/assets/js/admin-menu.js?ver=

HTML / DOM Fingerprints

CSS Classes
uagb-settingsuagb-settings-wrapuagb-admin-heading
Data Attributes
data-component-iddata-post-iddata-block
JS Globals
uagb_blocks_infouagb_admin
FAQ

Frequently Asked Questions about Spectra Legacy – Gutenberg Blocks