KB
Product
Kadence Blocks — Page Builder Toolkit for Gutenberg Editor
30
CVEs
0
On KEV
6.4
Max CVSS
1
New 30D
Severity mix
Critical 0High 0Medium 30Low 0
Watch
Add Kadence Blocks — Page Builder Toolkit for Gutenberg Editor to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-104762 | 6.4 | Oct 10 | Kadence Blocks <= 3.7.12 - Authenticated (Author+) Stored Cross-Site Scripting via Block Font Family Attribute Affected: through 3.7.12 |
| CVE-2026-18062 | 6.4 | Aug 1 | Kadence Blocks <= 3.7.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Identity Block Inner Image Content Affected: through 3.7.8.1 |
| CVE-2026-18435 | 6.4 | Aug 1 | Kadence Blocks <= 3.7.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'toggleIcon' Block Attribute Affected: through 3.7.8 |
| CVE-2025-1291 | 6.4 | Mar 1 | Gutenberg Blocks by Kadence Blocks <= 3.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'icon' Affected: through 3.4.9 |
| CVE-2023-6964 | 6.4 | Apr 9 | Gutenberg Blocks by Kadence Blocks – Page Builder Features <= 3.1.26 - Authenticated(Contributor+) Server-Side Request Forgery (SSRF) Affected: through 3.1.26 |
| CVE-2025-5678 | 5.4 | Jul 9 | Kadence Blocks – Gutenberg Blocks for Page Builder Features <= 3.5.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via `redirectURL` Parameter Affected: through 3.5.10 |
| CVE-2024-12304 | 5.4 | Jan 11 | Gutenberg Blocks with AI by Kadence WP – Page Builder Features <= 3.4.2 - Authenticated (contributor+) Stored Cross-Site Scripting via Button Link Affected: through 3.4.2 |
| CVE-2024-10785 | 5.4 | Nov 21 | Gutenberg Blocks with AI by Kadence WP – Page Builder Features <= 3.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: through 3.3.3 |
| CVE-2024-9655 | 5.4 | Nov 1 | Gutenberg Blocks with AI by Kadence WP – Page Builder Features <= 3.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Icon Widget Affected: through 3.3.1 |
| CVE-2024-5819 | 5.4 | Jun 29 | Gutenberg Blocks with AI by Kadence WP – Page Builder Features <= 3.2.45 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via HTML Data Attributes Affected: through 3.2.45 |
| CVE-2024-5289 | 5.4 | Jun 27 | Gutenberg Blocks with AI by Kadence WP – Page Builder Features <= 3.2.42 - Authenticated (Contributor+) Stored Cross-Site Scripting in Google Maps Widget Affected: through 3.2.42 |
| CVE-2024-4863 | 5.4 | Jun 14 | Gutenberg Blocks by Kadence Blocks – Page Builder Features <= 3.2.38 - Authenticated (Contributor+) Stored Cross-Site Scripting via titleFont Parameter Affected: through 3.2.38 |
| CVE-2024-4208 | 5.4 | May 15 | Gutenberg Blocks by Kadence Blocks – Page Builder Features <= 3.2.37 - Authenticated (Contributor+) Stored Cross-Site Scripting via Typer Effect Affected: through 3.2.37 |
| CVE-2024-3189 | 5.4 | May 15 | Gutenberg Blocks by Kadence Blocks – Page Builder Features <= 3.2.37 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: through 3.2.37 |
| CVE-2024-4209 | 5.4 | May 11 | Gutenberg Blocks by Kadence Blocks – Page Builder Features <= 3.2.36 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Timer Affected: through 3.2.36 |
| CVE-2024-4481 | 5.4 | May 10 | Gutenberg Blocks with AI by Kadence WP <= 3.2.36 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block Link Affected: through 3.2.36 |
| CVE-2024-2273 | 5.4 | May 2 | Gutenberg Blocks by Kadence Blocks – Page Builder Features <= 3.2.34 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: through 3.2.34 |
| CVE-2024-1999 | 5.4 | Apr 9 | Gutenberg Blocks by Kadence Blocks – Page Builder Features <= 3.2.25 - Authenticated (Contributor+) Stored Cross-Site Scripting via Testimonial Widget Affected: through 3.2.25 |
| CVE-2024-2919 | 5.4 | Apr 4 | Gutenberg Blocks by Kadence Blocks – Page Builder Features <= 3.2.31 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via CountUp Widget Affected: through 3.2.31 |
| CVE-2024-1541 | 5.4 | Mar 13 | Gutenberg Blocks by Kadence Blocks – Page Builder Features <= 3.2.23 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: through 3.2.23 |
| CVE-2024-12581 | 4.8 | Dec 13 | Kadence Blocks <= 3.2.53 - Authenticated (Admin+) Stored Cross-Site Scripting Affected: through 3.2.53 |
| CVE-2024-0598 | 4.8 | Apr 9 | Gutenberg Blocks by Kadence Blocks <= 3.2.17 - Authenticated(Editor+) Stored Cross-Site Scripting via Contact Form Message Settings Affected: through 3.2.17 |
| CVE-2026-15286 | 4.3 | Jul 10 | Gutenberg Blocks with AI by Kadence WP – Page Builder Features <= 3.5.32 - Incorrect Authorization to Authenticated (Contributor+) Post Publication Affected: through 3.5.32 |
| CVE-2026-12902 | 4.3 | Jul 1 | Kadence Blocks <= 3.7.7 - Missing Authorization to Authenticated (Contributor+) Arbitrary Media Attachment Creation via kadence_import_process_pattern/kadence_import_process_data AJAX Actions Affected: through 3.7.7 |
| CVE-2026-12904 | 4.3 | Jul 1 | Kadence Blocks <= 3.7.7 - Insecure Direct Object Reference to Authenticated (Contributor+) Arbitrary Optimizer Data Deletion/Read/Modification via 'post_path' Parameter Affected: through 3.7.7 |
| CVE-2026-11357 | 4.3 | Jun 18 | Kadence Blocks <= 3.7.5 - Authenticated (Contributor+) Sensitive Information Exposure via Block Editor proData Localization Affected: through 3.7.5 |
| CVE-2026-2826 | 4.3 | Apr 4 | Kadence Blocks — Page Builder Toolkit for Gutenberg Editor <= 3.6.3 - Missing Authorization to Authenticated (Contributor+) Media Upload Affected: through 3.6.3 |
| CVE-2026-2633 | 4.3 | Feb 18 | Gutenberg Blocks with AI by Kadence WP <= 3.6.1 - Missing Authorization to Authenticated (Contributor+) Unauthorized Media Upload Affected: through 3.6.1 |
| CVE-2026-1857 | 4.3 | Feb 18 | Gutenberg Blocks with AI by Kadence WP <= 3.6.1 - Authenticated (Contributor+) Server-Side Request Forgery via 'endpoint' Parameter Affected: through 3.6.1 |
| CVE-2026-2608 | 4.3 | Feb 17 | Gutenberg Blocks by Kadence Blocks <= 3.5.32 - Missing Authorization Affected: through 3.5.32 |
Showing 30