WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
kadence-blocks
Published
2025-01-10
Title
Gutenberg Blocks with AI by Kadence WP – Page Builder Features < 3.4.3 - Authenticated (contributor+) Stored Cross-Site Scripting via Button Link
Slug
kadence-blocks
Published
2025-01-24
Title
Gutenberg Blocks by Kadence Blocks < 3.3.2 - Missing Authorization
Slug
kadence-blocks
Published
2025-02-28
Title
Gutenberg Blocks by Kadence Blocks < 3.4.10 - Contributor+ Stored XSS
Slug
kadence-blocks
Published
2025-07-08
Title
Kadence Blocks – Gutenberg Blocks for Page Builder Features < 3.5.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via `redirectURL` Parameter
Slug
kadence-blocks
Published
2026-02-11
Title
Gutenberg Blocks by Kadence Blocks < 3.6.0 - Missing Authorization
Slug
kadence-blocks
Published
2026-02-17
Title
Gutenberg Blocks with AI by Kadence WP < 3.6.2 - Contributor+ SSRF
Slug
kadence-blocks
Published
2026-02-17
Title
Gutenberg Blocks with AI by Kadence WP < 3.6.2 - Contributor+ Unauthorized Media Upload
Slug
kadence-blocks
Published
2026-04-03
Title
Kadence Blocks < 3.6.4 - Contributor+ Media Upload
Slug
kadence-blocks
Published
2026-02-10
Title
Page Builder Features < 3.6.0 - Contributor+ Post Publication
Slug
kadence-blocks
Published
2026-06-17
Title
Kadence Blocks < 3.7.6 - Contributor+ Sensitive Information Exposure via Block Editor proData Localization
Slug
kadence-blocks
Published
2026-06-30
Title
Kadence Blocks < 3.7.8 - Contributor+ Arbitrary Media Attachment Creation via kadence_import_process_pattern/kadence_import_process_data AJAX Actions
Slug
kadence-blocks
Published
2026-06-30
Title
Kadence Blocks < 3.7.8 - Contributor+ Arbitrary Optimizer Data Read/Modification/Deletion via IDOR in post_path
Slug
kadence-blocks
Published
2026-07-31
Title
Kadence Blocks < 3.7.8.1 - Contributor+ Stored XSS via 'toggleIcon' Block Attribute
Slug
kadence-blocks
Published
2026-07-31
Title
Kadence Blocks < 3.7.8.2 - Contributor+ Stored XSS via Identity Block Inner Image Content
Slug
kadence-blocks
Published
2026-07-29
Title
Kadence Blocks < 3.7.8.1 - Contributor+ Information Exposure
Slug
kadence-blocks-pro
Published
2024-06-06
Title
Kadence Blocks Pro < 2.3.8 - Contributor+ Arbitrary Option Access
Slug
kadence-shop-kit
Published
2026-08-25
Title
Kadence Shop Kit < 3.0.6.1 - Authenticated (Subscriber+) SQL Injection
Slug
kadence-starter-templates
Published
2022-12-16
Title
Starter Templates by Kadence WP < 1.2.17 - Admin+ PHP Object Injection
Slug
kadence-starter-templates
Published
2026-08-14
Title
Kadence Starter Templates — Predesigned Website Templates < 2.3.4 - Unauthenticated Denial of Service
Slug
kadence-woocommerce-email-designer
Published
2022-10-03
Title
Kadence WooCommerce Email Designer < 1.5.7 - Admin+ PHP Objection Injection
Slug
kadence-woocommerce-email-designer
Published
2023-11-02
Title
Kadence WooCommerce Email Designer < 1.5.12 - CSRF
Slug
kadence-woocommerce-email-designer
Published
2025-04-16
Title
Kadence WooCommerce Email Designer < 1.5.15 - Admin+ Arbitrary File Upload
Slug
kadence-woocommerce-email-designer
Published
2025-08-14
Title
Kadence WooCommerce Email Designer < 1.5.17 - Shop Manager+ Arbitrary Options Update
Slug
kadence-woocommerce-email-designer
Published
2025-12-01
Title
Kadence WooCommerce Email Designer < 1.5.18 - Unauthenticated Stored XSS
Slug
kadence-woocommerce-email-designer
Published
2026-08-04
Title
Kadence WooCommerce Email Designer < 1.5.19.1 - Unauthenticated Privilege Escalation