4.3
Medium
CVE-2026-2608 The Kadence Blocks — Page Builder Toolkit for Gutenberg Editor plugin for WordPress is vulnerable to unauthorized access…
Description
The Kadence Blocks — Page Builder Toolkit for Gutenberg Editor plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 3.5.32. This makes it possible for authenticated attackers, with Contributor-level access and above, to perform an unauthorized action.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Kadence Blocks — Page Builder Toolkit for Gutenberg Editor 3.5 | earliest → 3.5.32 | No fix stated |
Other CVEs of Kadence Blocks — Page Builder Toolkit for Gutenberg Editor
The 30 CVEs of Kadence Blocks — Page Builder Toolkit for Gutenberg Editor →
CVE-2026-104762
The Kadence Blocks — Page Builder Toolkit for Gutenberg Editor plugin for WordPress is vulnerable to Stored Cross-Site…
6.4
Medium
CVE-2026-18062
The Kadence Blocks — Page Builder Toolkit for Gutenberg Editor plugin for WordPress is vulnerable to Stored Cross-Site…
6.4
Medium
CVE-2026-18435
The Kadence Blocks — Page Builder Toolkit for Gutenberg Editor plugin for WordPress is vulnerable to Stored Cross-Site…
6.4
Medium
CVE-2026-15286
The Gutenberg Blocks with AI by Kadence WP – Page Builder Features plugin for WordPress is vulnerable to unauthorized…
4.3
Medium