Log out
Get PRO

Latest

Input validation vulnerability in Gutenberg Blocks with AI by Kadence WP – Page Builder Features 3.2.36

  • Severity: medium-risk
  • Status: Fixed
  • Publication: May 14, 2024

The Gutenberg Blocks with AI by Kadence WP – Page Builder Features plugin for WordPress can be easily attacked by hackers through a vulnerability called Stored Cross-Site Scripting. This happens because the plugin does not properly filter or protect against malicious code that can be inserted into web pages. This can happen in versions up to and including 3.2.36. This means that anyone who visits a page with this malicious code can unknowingly execute it, giving the attacker access to their information.

Detected in:

Gutenberg Blocks with AI by Kadence WP – Page Builder Features fixed vulnerable versions: >= * <= 3.2.36
Kadence Blocks — Page Builder Toolkit for Gutenberg Editor fixed vulnerable versions:

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.