Plugin icon

Kadence Blocks — Page Builder Toolkit for Gutenberg Editor

kadence-blocks

Vulnerabilities:

30

Last Updated:

March 11, 2026

Active Installs:

600000

Published
Title
Fixed in
CVSS
Published
2026-02-17
Title
Gutenberg Blocks with AI by Kadence WP < 3.6.2 - Contributor+ Unauthorized Media Upload
Fixed in
Fixed in 3.6.2
CVSS
2.7 (low)
Published
2026-02-17
Title
Gutenberg Blocks with AI by Kadence WP < 3.6.2 - Contributor+ SSRF
Fixed in
Fixed in 3.6.2
CVSS
2.7 (low)
Published
2026-02-11
Title
Gutenberg Blocks by Kadence Blocks < 3.6.0 - Missing Authorization
Fixed in
Fixed in 3.6.0
CVSS
4.3 (medium)
Published
2025-07-08
Title
Kadence Blocks – Gutenberg Blocks for Page Builder Features < 3.5.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via `redirectURL` Parameter
Fixed in
Fixed in 3.5.11
CVSS
6.4 (medium)
Published
2025-02-28
Title
Gutenberg Blocks by Kadence Blocks < 3.4.10 - Contributor+ Stored XSS
Fixed in
Fixed in 3.4.10
CVSS
5.9 (medium)
Published
2025-01-24
Title
Gutenberg Blocks by Kadence Blocks < 3.3.2 - Missing Authorization
Fixed in
Fixed in 3.3.2
CVSS
4.3 (medium)
Published
2025-01-10
Title
Gutenberg Blocks with AI by Kadence WP – Page Builder Features < 3.4.3 - Authenticated (contributor+) Stored Cross-Site Scripting via Button Link
Fixed in
Fixed in 3.4.3
CVSS
6.4 (medium)
Published
2024-11-21
Title
Kadence Blocks < 3.2.54 - Authenticated (Admin+) Stored Cross-Site Scripting
Fixed in
Fixed in 3.2.54
CVSS
4.4 (medium)
Published
2024-11-21
Title
Kadence Blocks < 3.2.54 - Admin+ Stored XSS
Fixed in
Fixed in 3.2.54
CVSS
3.5 (low)
Published
2024-11-20
Title
Gutenberg Blocks with AI by Kadence WP – Page Builder Features < 3.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 3.3.4
CVSS
6.4 (medium)
Published
2024-10-31
Title
Gutenberg Blocks with AI by Kadence WP – Page Builder Features < 3.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Icon Widget
Fixed in
Fixed in 3.3.2
CVSS
6.4 (medium)
Published
2024-07-18
Title
Gutenberg Blocks with AI by Kadence WP < 3.2.53 - Contributor+ Stored XSS
Fixed in
Fixed in 3.2.53
CVSS
5.9 (medium)
Published
2024-06-28
Title
Gutenberg Blocks with AI by Kadence WP – Page Builder Features < 3.2.46 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via HTML Data Attributes
Fixed in
Fixed in 3.2.46
CVSS
6.4 (medium)
Published
2024-06-26
Title
Gutenberg Blocks with AI by Kadence WP – Page Builder Features < 3.2.43 - Authenticated (Contributor+) Stored Cross-Site Scripting in Google Maps Widget
Fixed in
Fixed in 3.2.43
CVSS
6.4 (medium)
Published
2024-06-13
Title
Gutenberg Blocks by Kadence Blocks – Page Builder Features < 3.2.39 - Authenticated (Contributor+) Stored Cross-Site Scripting via titleFont Parameter
Fixed in
Fixed in 3.2.39
CVSS
6.4 (medium)
Published
2024-05-14
Title
Gutenberg Blocks by Kadence Blocks – Page Builder Features < 3.2.38 - Contributor+ Stored Cross-Site Scripting
Fixed in
Fixed in 3.2.38
CVSS
5.4 (medium)
Published
2024-05-14
Title
Gutenberg Blocks by Kadence Blocks < 3.2.37 - Contributor+ Stored XSS
Fixed in
Fixed in 3.2.37
CVSS
5.9 (medium)
Published
2024-05-14
Title
Gutenberg Blocks by Kadence Blocks – Page Builder Features < 3.2.38 - Contributor+ Stored Cross-Site Scripting via Typer Effect
Fixed in
Fixed in 3.2.38
CVSS
6.4 (medium)
Published
2024-05-10
Title
Gutenberg Blocks by Kadence Blocks – Page Builder Features < 3.2.37 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Timer
Fixed in
Fixed in 3.2.37
CVSS
6.4 (medium)
Published
2024-05-09
Title
Gutenberg Blocks with AI by Kadence WP < 3.2.37 - Contributor+ Stored Cross-Site Scripting via Block Link
Fixed in
Fixed in 3.2.37
CVSS
6.4 (medium)
Published
2024-05-01
Title
Gutenberg Blocks by Kadence Blocks < 3.2.35 - Contributor+ Stored XSS
Fixed in
Fixed in 3.2.35
CVSS
5.9 (medium)
Published
2024-04-09
Title
Kadence Blocks < 3.2.12 - Contributor+ Server-Side Request Forgery
Fixed in
Fixed in 3.2.12
CVSS
8.5 (high)
Published
2024-04-03
Title
Gutenberg Blocks by Kadence Blocks – Page Builder Features < 3.2.32 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown and CountUp Widget
Fixed in
Fixed in 3.2.32
CVSS
6.4 (medium)
Published
2024-04-02
Title
Gutenberg Blocks by Kadence Blocks < 3.2.18 - Authenticated(Editor+) Stored Cross-Site Scripting via Contact Form Message Settings
Fixed in
Fixed in 3.2.18
CVSS
4.4 (medium)
Published
2024-03-29
Title
Gutenberg Blocks by Kadence Blocks < 3.2.26 - Authenticated (Author+) Server-Side Request Forgery
Fixed in
Fixed in 3.2.26
CVSS
6.4 (medium)
Published
2024-03-26
Title
Gutenberg Blocks with AI by Kadence WP – Page Builder Features < 3.2.20 - Contributor+ Server-Side Request Forgery
Fixed in
Fixed in 3.2.20
CVSS
5.5 (medium)
Published
2024-03-21
Title
Gutenberg Blocks by Kadence Blocks – Page Builder Features < 3.2.26 - Contributor+ Stored XSS
Fixed in
Fixed in 3.2.26
CVSS
6.4 (medium)
Published
2024-03-15
Title
Gutenberg Blocks by Kadence Blocks < 3.2.26 - Contributor+ Stored XSS
Fixed in
Fixed in 3.2.26
CVSS
4.3 (medium)
Published
2024-03-15
Title
Gutenberg Blocks by Kadence Blocks < 3.2.26 - Contributor+ Stored XSS
Fixed in
Fixed in 3.2.26
CVSS
5.9 (medium)
Published
2024-03-01
Title
Gutenberg Blocks by Kadence Blocks < 3.2.24 - Contributor+ Stored XSS
Fixed in
Fixed in 3.2.24
CVSS
5.9 (medium)