agentprime: stellarwp-kadence-blocks-page-builder-toolkit-for-gutenberg-editorEvery new CVE for stellarwp-kadence-blocks-page-builder-toolkit-for-gutenberg-editor.https://agentprime.io/CVE-2026-104762: Kadence Blocks <= 3.7.12 - Authenticated (Author+) Stored Cross-Site Scripting via Block Font Family Attributehttps://agentprime.io/advisories/CVE-2026-104762/https://agentprime.io/advisories/CVE-2026-104762/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 10 Oct 2026 05:31:03 GMTCVECVE-2026-18062: Kadence Blocks <= 3.7.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Identity Block Inner Image Contenthttps://agentprime.io/advisories/CVE-2026-18062/https://agentprime.io/advisories/CVE-2026-18062/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 01 Aug 2026 07:49:47 GMTCVECVE-2026-18435: Kadence Blocks <= 3.7.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'toggleIcon' Block Attributehttps://agentprime.io/advisories/CVE-2026-18435/https://agentprime.io/advisories/CVE-2026-18435/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 01 Aug 2026 07:49:47 GMTCVECVE-2026-15286: Gutenberg Blocks with AI by Kadence WP – Page Builder Features <= 3.5.32 - Incorrect Authorization to Authenticated (Contributor+) Post Publicationhttps://agentprime.io/advisories/CVE-2026-15286/https://agentprime.io/advisories/CVE-2026-15286/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 10 Jul 2026 04:31:22 GMTCVECVE-2026-12902: Kadence Blocks <= 3.7.7 - Missing Authorization to Authenticated (Contributor+) Arbitrary Media Attachment Creation via kadence_import_process_pattern/kadence_import_process_data AJAX Actionshttps://agentprime.io/advisories/CVE-2026-12902/https://agentprime.io/advisories/CVE-2026-12902/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 01 Jul 2026 03:43:36 GMTCVECVE-2026-12904: Kadence Blocks <= 3.7.7 - Insecure Direct Object Reference to Authenticated (Contributor+) Arbitrary Optimizer Data Deletion/Read/Modification via 'post_path' Parameterhttps://agentprime.io/advisories/CVE-2026-12904/https://agentprime.io/advisories/CVE-2026-12904/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 01 Jul 2026 03:43:34 GMTCVECVE-2026-11357: Kadence Blocks <= 3.7.5 - Authenticated (Contributor+) Sensitive Information Exposure via Block Editor proData Localizationhttps://agentprime.io/advisories/CVE-2026-11357/https://agentprime.io/advisories/CVE-2026-11357/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 18 Jun 2026 04:31:10 GMTCVECVE-2026-2826: Kadence Blocks — Page Builder Toolkit for Gutenberg Editor <= 3.6.3 - Missing Authorization to Authenticated (Contributor+) Media Uploadhttps://agentprime.io/advisories/CVE-2026-2826/https://agentprime.io/advisories/CVE-2026-2826/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 04 Apr 2026 08:25:19 GMTCVECVE-2026-2633: Gutenberg Blocks with AI by Kadence WP <= 3.6.1 - Missing Authorization to Authenticated (Contributor+) Unauthorized Media Uploadhttps://agentprime.io/advisories/CVE-2026-2633/https://agentprime.io/advisories/CVE-2026-2633/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 18 Feb 2026 06:42:42 GMTCVECVE-2026-1857: Gutenberg Blocks with AI by Kadence WP <= 3.6.1 - Authenticated (Contributor+) Server-Side Request Forgery via 'endpoint' Parameterhttps://agentprime.io/advisories/CVE-2026-1857/https://agentprime.io/advisories/CVE-2026-1857/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 18 Feb 2026 06:42:40 GMTCVECVE-2026-2608: Gutenberg Blocks by Kadence Blocks <= 3.5.32 - Missing Authorizationhttps://agentprime.io/advisories/CVE-2026-2608/https://agentprime.io/advisories/CVE-2026-2608/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 17 Feb 2026 11:20:37 GMTCVECVE-2025-5678: Kadence Blocks – Gutenberg Blocks for Page Builder Features <= 3.5.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via `redirectURL` Parameterhttps://agentprime.io/advisories/CVE-2025-5678/https://agentprime.io/advisories/CVE-2025-5678/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 09 Jul 2025 01:44:51 GMTCVECVE-2025-1291: Gutenberg Blocks by Kadence Blocks <= 3.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'icon'https://agentprime.io/advisories/CVE-2025-1291/https://agentprime.io/advisories/CVE-2025-1291/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 01 Mar 2025 08:23:20 GMTCVECVE-2024-12304: Gutenberg Blocks with AI by Kadence WP – Page Builder Features <= 3.4.2 - Authenticated (contributor+) Stored Cross-Site Scripting via Button Linkhttps://agentprime.io/advisories/CVE-2024-12304/https://agentprime.io/advisories/CVE-2024-12304/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 11 Jan 2025 03:21:03 GMTCVECVE-2024-12581: Kadence Blocks <= 3.2.53 - Authenticated (Admin+) Stored Cross-Site Scriptinghttps://agentprime.io/advisories/CVE-2024-12581/https://agentprime.io/advisories/CVE-2024-12581/CVSS 4.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 13 Dec 2024 05:24:48 GMTCVECVE-2024-10785: Gutenberg Blocks with AI by Kadence WP – Page Builder Features <= 3.3.3 - Authenticated (Contributor+) Stored Cross-Site Scriptinghttps://agentprime.io/advisories/CVE-2024-10785/https://agentprime.io/advisories/CVE-2024-10785/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 21 Nov 2024 04:24:25 GMTCVECVE-2024-9655: Gutenberg Blocks with AI by Kadence WP – Page Builder Features <= 3.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Icon Widgethttps://agentprime.io/advisories/CVE-2024-9655/https://agentprime.io/advisories/CVE-2024-9655/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 01 Nov 2024 07:33:30 GMTCVECVE-2024-5819: Gutenberg Blocks with AI by Kadence WP – Page Builder Features <= 3.2.45 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via HTML Data Attributeshttps://agentprime.io/advisories/CVE-2024-5819/https://agentprime.io/advisories/CVE-2024-5819/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 29 Jun 2024 09:46:42 GMTCVECVE-2024-5289: Gutenberg Blocks with AI by Kadence WP – Page Builder Features <= 3.2.42 - Authenticated (Contributor+) Stored Cross-Site Scripting in Google Maps Widgethttps://agentprime.io/advisories/CVE-2024-5289/https://agentprime.io/advisories/CVE-2024-5289/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 27 Jun 2024 02:03:02 GMTCVECVE-2024-4863: Gutenberg Blocks by Kadence Blocks – Page Builder Features <= 3.2.38 - Authenticated (Contributor+) Stored Cross-Site Scripting via titleFont Parameterhttps://agentprime.io/advisories/CVE-2024-4863/https://agentprime.io/advisories/CVE-2024-4863/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 14 Jun 2024 08:35:34 GMTCVECVE-2024-4208: Gutenberg Blocks by Kadence Blocks – Page Builder Features <= 3.2.37 - Authenticated (Contributor+) Stored Cross-Site Scripting via Typer Effecthttps://agentprime.io/advisories/CVE-2024-4208/https://agentprime.io/advisories/CVE-2024-4208/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 15 May 2024 02:32:44 GMTCVECVE-2024-3189: Gutenberg Blocks by Kadence Blocks – Page Builder Features <= 3.2.37 - Authenticated (Contributor+) Stored Cross-Site Scriptinghttps://agentprime.io/advisories/CVE-2024-3189/https://agentprime.io/advisories/CVE-2024-3189/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 15 May 2024 02:32:43 GMTCVECVE-2024-4209: Gutenberg Blocks by Kadence Blocks – Page Builder Features <= 3.2.36 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Timerhttps://agentprime.io/advisories/CVE-2024-4209/https://agentprime.io/advisories/CVE-2024-4209/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 11 May 2024 01:56:00 GMTCVECVE-2024-4481: Gutenberg Blocks with AI by Kadence WP <= 3.2.36 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block Linkhttps://agentprime.io/advisories/CVE-2024-4481/https://agentprime.io/advisories/CVE-2024-4481/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 10 May 2024 06:44:57 GMTCVECVE-2024-2273: Gutenberg Blocks by Kadence Blocks – Page Builder Features <= 3.2.34 - Authenticated (Contributor+) Stored Cross-Site Scriptinghttps://agentprime.io/advisories/CVE-2024-2273/https://agentprime.io/advisories/CVE-2024-2273/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 02 May 2024 16:52:49 GMTCVECVE-2024-1999: Gutenberg Blocks by Kadence Blocks – Page Builder Features <= 3.2.25 - Authenticated (Contributor+) Stored Cross-Site Scripting via Testimonial Widgethttps://agentprime.io/advisories/CVE-2024-1999/https://agentprime.io/advisories/CVE-2024-1999/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Apr 2024 18:59:15 GMTCVECVE-2023-6964: Gutenberg Blocks by Kadence Blocks – Page Builder Features <= 3.1.26 - Authenticated(Contributor+) Server-Side Request Forgery (SSRF)https://agentprime.io/advisories/CVE-2023-6964/https://agentprime.io/advisories/CVE-2023-6964/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Apr 2024 18:59:15 GMTCVECVE-2024-0598: Gutenberg Blocks by Kadence Blocks <= 3.2.17 - Authenticated(Editor+) Stored Cross-Site Scripting via Contact Form Message Settingshttps://agentprime.io/advisories/CVE-2024-0598/https://agentprime.io/advisories/CVE-2024-0598/CVSS 4.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Apr 2024 18:59:07 GMTCVECVE-2024-2919: Gutenberg Blocks by Kadence Blocks – Page Builder Features <= 3.2.31 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via CountUp Widgethttps://agentprime.io/advisories/CVE-2024-2919/https://agentprime.io/advisories/CVE-2024-2919/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 04 Apr 2024 02:32:40 GMTCVECVE-2024-1541: Gutenberg Blocks by Kadence Blocks – Page Builder Features <= 3.2.23 - Authenticated (Contributor+) Stored Cross-Site Scriptinghttps://agentprime.io/advisories/CVE-2024-1541/https://agentprime.io/advisories/CVE-2024-1541/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 13 Mar 2024 15:27:15 GMTCVE