CVE-2024-1330

The kadence-blocks-pro WordPress plugin before 2.3.8 does not prevent users with at least the contributor role using some of its shortcode's functionalities to leak arbitrary options from the database.

Score

CVSS 3.1 4.3 Medium

Status

Modified - contact@wpscan.com

Published

2024-06-27

Last modified

2025-09-15

Affected products

• Kadence Blocks Pro (Kadencewp)
• Kadence-blocks-pro (Unknown)

References

• https://wpscan.com/vulnerability/1988815b-7a53-4657-9b1c-1f83c9f9ccfd/