WordPress Plugin Vulnerabilities

Kadence Starter Templates — Predesigned Website Templates < 2.3.4 - Unauthenticated Denial of Service

Description

The Kadence Starter Templates — Predesigned Website Templates plugin for WordPress is vulnerable to Denial of Service in all versions up to, and including, 2.3.3. This makes it possible for unauthenticated attackers to compromise the availability of a site.

Affects Plugins

Plugin icon
kadence-starter-templates
Fixed in 2.3.4

References

CVE
CVE-2026-73997
URL
https://www.wordfence.com/threat-intel/vulnerabilities/id/a27c0dc8-a6bf-45a4-af48-ccc375720a4a

Miscellaneous

Original Researcher
Asim Alshaya
Verified
No
WPVDB ID
9db0f0c7-66f3-429c-a2aa-25c105815721

Timeline

Publicly Published
2026-08-14 (about 2 months ago)
Added
2026-08-20 (about 1 month ago)
Last Updated
2026-08-20 (about 1 month ago)

Other

Published
Title
Published
2023-10-12
Title
WP < 6.3.2 - Denial of Service via Cache Poisoning
Published
2025-03-20
Title
WP-GeSHi-Highlight <= 1.4.3 - Author+ ReDoS
Published
2014-08-27
Title
WordPress 3.5-3.7.1 - XML-RPC Denial of Service
Published
2026-09-21
Title
WP Recipe Maker 9.8.0 - 10.8.1 - Unauthenticated DoS via Unbounded User Meta Insertion
Published
2026-09-02
Title
Really Simple Security < 9.8.1 - Unauthenticated DoS