4.3
Medium
CVE-2024-1330 The kadence-blocks-pro WordPress plugin before 2.3.8 does not prevent users with at least the contributor role using…
Description
The kadence-blocks-pro WordPress plugin before 2.3.8 does not prevent users with at least the contributor role using some of its shortcode's functionalities to leak arbitrary options from the database.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| kadence-blocks-pro 2.3 | earliest → < 2.3.8 | 2.3.8 |