RCE in Spectra Gutenberg Blocks WordPress Plugin

Repository contains a README and one Python exploit script. The README documents CVE-2026-7465 in Spectra Gutenberg Blocks <= 2.19.25, describing an authenticated Contributor+ arbitrary PHP function call / RCE path caused by unsafe registration of attacker-controlled block attributes into WP_Block_Type_Registry. The exploitation model is a two-block Gutenberg payload: the first malicious uagb/ block registers a fake block type with a chosen render_callback, and the second block with the same name triggers WordPress to call that callback with attacker-controlled arguments. The documented example uses wp_insert_user to create an administrator account. The main code file, poc.py, is a black-box HTTP exploit written in Python using requests. It performs reconnaissance against the target WordPress site, checks plugin presence via the Spectra plugin PHP path, checks REST API availability at /wp-json/, verifies wp-login.php accessibility, authenticates as a Contributor, creates a draft exploit post through HTTP interactions, triggers rendering via preview/frontend access, verifies success by attempting login as the newly created admin, and leaves artifacts for manual verification. The script is operational rather than a mere detector because it automates exploitation and post-exploitation verification. The attack vector is web-based and requires valid low-privileged WordPress credentials plus a vulnerable Spectra installation.