WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
kadence-blocks
Published
2025-01-10
Title
Gutenberg Blocks with AI by Kadence WP – Page Builder Features < 3.4.3 - Authenticated (contributor+) Stored Cross-Site Scripting via Button Link
Slug
kadence-blocks
Published
2025-01-24
Title
Gutenberg Blocks by Kadence Blocks < 3.3.2 - Missing Authorization
Slug
kadence-blocks
Published
2025-02-28
Title
Gutenberg Blocks by Kadence Blocks < 3.4.10 - Contributor+ Stored XSS
Slug
kadence-blocks
Published
2025-07-08
Title
Kadence Blocks – Gutenberg Blocks for Page Builder Features < 3.5.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via `redirectURL` Parameter
Slug
kadence-blocks
Published
2026-02-11
Title
Gutenberg Blocks by Kadence Blocks < 3.6.0 - Missing Authorization
Slug
kadence-blocks
Published
2026-02-17
Title
Gutenberg Blocks with AI by Kadence WP < 3.6.2 - Contributor+ SSRF
Slug
kadence-blocks
Published
2026-02-17
Title
Gutenberg Blocks with AI by Kadence WP < 3.6.2 - Contributor+ Unauthorized Media Upload
Slug
kadence-blocks-pro
Published
2024-06-06
Title
Kadence Blocks Pro < 2.3.8 - Contributor+ Arbitrary Option Access
Slug
kadence-starter-templates
Published
2022-12-16
Title
Starter Templates by Kadence WP < 1.2.17 - Admin+ PHP Object Injection
Slug
kadence-woocommerce-email-designer
Published
2022-10-03
Title
Kadence WooCommerce Email Designer < 1.5.7 - Admin+ PHP Objection Injection
Slug
kadence-woocommerce-email-designer
Published
2023-11-02
Title
Kadence WooCommerce Email Designer < 1.5.12 - CSRF
Slug
kadence-woocommerce-email-designer
Published
2025-04-16
Title
Kadence WooCommerce Email Designer < 1.5.15 - Admin+ Arbitrary File Upload
Slug
kadence-woocommerce-email-designer
Published
2025-08-14
Title
Kadence WooCommerce Email Designer < 1.5.17 - Shop Manager+ Arbitrary Options Update
Slug
kadence-woocommerce-email-designer
Published
2025-12-01
Title
Kadence WooCommerce Email Designer < 1.5.18 - Unauthenticated Stored XSS
Slug
kalender-digital
Published
2024-07-10
Title
Calendar.online / Kalender.digital < 1.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
kalender-digital
Published
2025-12-31
Title
Calendar.online / Kalender.digital < 1.0.14 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
kali-forms
Published
2020-08-21
Title
Contact Form - Form builder by Kali Forms < 2.1.2 - Unauthenticated Arbitrary Post Deletion
Slug
kali-forms
Published
2020-08-21
Title
Contact Form - Form builder by Kali Forms < 2.1.2 - Authenticated Plugin's Settings Change
Slug
kali-forms
Published
2020-08-21
Title
Contact Form - Form builder by Kali Forms < 2.1.2 - Multiple CSRF Bypass Issues
Slug
kali-forms
Published
2023-10-06
Title
Contact Form builder with drag & drop - Kali Forms < 2.3.29 - Missing Authorization via get_log
Slug
kali-forms
Published
2023-10-16
Title
Contact Form builder with drag & drop - Kali Forms < 2.3.28 - Missing Authorization via Contact Form
Slug
kali-forms
Published
2024-01-17
Title
Contact Form builder with drag & drop - Kali Forms < 2.3.37 - Insecure Direct Object Reference
Slug
kali-forms
Published
2024-02-19
Title
Contact Form builder with drag & drop for WordPress – Kali Forms < 2.3.42 - Missing Authorization to Arbitrary Plugin Deactivation
Slug
kali-forms
Published
2024-02-19
Title
Contact Form builder with drag & drop for WordPress – Kali Forms < 2.3.42 - Missing Authorization
Slug
kali-forms
Published
2025-04-25
Title
Kali Forms < 2.4.3 - Contributor+ Stored XSS