Skip to content
Noroxi

kadencewp records

29 published records for vendor kadencewp.

Filter by product ↓

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
31%
Median publish → KEV
No record has entered KEV

Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.

Records by year

  1. 22
  2. 23
  3. 24
  4. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

29 records
  • CVE-2022-3679
    35Monitor

    Starter Templates by Kadence WP < 1.2.17 - Admin+ PHP Object Injection

    HighCVSS 8.8No exploitEPSS 0%

    kadencewp · starter templatesJan 9, 2023

  • CVE-2025-24753
    35Monitor

    WordPress Kadence Blocks plugin <= 3.3.1 - Broken Access Control vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    kadencewp · gutenberg blocks with aiJan 24, 2025

  • CVE-2023-47186
    35Monitor

    WordPress Kadence WooCommerce Email Designer Plugin <= 1.5.11 is vulnerable to Cross Site Request Forgery (CSRF)

    HighCVSS 8.8No exploitEPSS 0%

    kadencewp · kadence woocommerce email designerNov 6, 2023

  • CVE-2022-3335
    28Monitor

    Kadence WooCommerce Email Designer < 1.5.7 - Admin+ PHP Objection Injection

    HighCVSS 7.2No exploitEPSS 1%

    kadencewp · kadence woocommerce email designerOct 25, 2022

  • CVE-2024-23500
    26Monitor

    WordPress Kadence Blocks plugin <= 3.2.19 - Server Side Request Forgery (SSRF) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    kadencewp · gutenberg blocks with aiMar 28, 2024

  • CVE-2024-2509
    26Monitor

    Gutenberg Blocks by Kadence Blocks < 3.2.26 - Contributor+ Stored XSS

    MediumCVSS 6.5No exploitEPSS 0%

    kadencewp · gutenberg blocks with aiApr 5, 2024

  • CVE-2024-24888
    26Monitor

    WordPress Gutenberg Blocks by Kadence Blocks plugin <= 3.2.25 - Server Side Request Forgery (SSRF) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    kadencewp · gutenberg blocks with aiApr 2, 2024

  • CVE-2023-6964
    25Monitor

    Gutenberg Blocks by Kadence Blocks – Page Builder Features <= 3.1.26 - Authenticated(Contributor+) Server-Side Request Forgery (SSRF)

    MediumCVSS 6.4No exploitEPSS 0%

    kadencewp · gutenberg blocks with aiApr 9, 2024

  • CVE-2024-4057
    24Monitor

    Gutenberg Blocks by Kadence Blocks < 3.2.37 - Contributor+ Stored XSS

    MediumCVSS 6.1No exploitEPSS 0%

    kadencewp · gutenberg blocks with aiJun 4, 2024

  • CVE-2024-1541
    21Monitor

    Gutenberg Blocks by Kadence Blocks – Page Builder Features <= 3.2.23 - Authenticated (Contributor+) Stored Cross-Site Scripting

    MediumCVSS 5.4No exploitEPSS 0%

    kadencewp · gutenberg blocks with aiMar 13, 2024

  • CVE-2024-1999
    21Monitor

    Gutenberg Blocks by Kadence Blocks – Page Builder Features <= 3.2.25 - Authenticated (Contributor+) Stored Cross-Site Scripting via Testimonial Widget

    MediumCVSS 5.4No exploitEPSS 0%

    kadencewp · gutenberg blocks with aiApr 9, 2024

  • CVE-2024-4863
    21Monitor

    Gutenberg Blocks by Kadence Blocks – Page Builder Features <= 3.2.38 - Authenticated (Contributor+) Stored Cross-Site Scripting via titleFont Parameter

    MediumCVSS 5.4No exploitEPSS 0%

    kadencewp · gutenberg blocks with aiJun 14, 2024

  • CVE-2024-10785
    21Monitor

    Gutenberg Blocks with AI by Kadence WP – Page Builder Features <= 3.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting

    MediumCVSS 5.4No exploitEPSS 0%

    kadencewp · gutenberg blocks with aiNov 21, 2024

  • CVE-2024-4209
    21Monitor

    Gutenberg Blocks by Kadence Blocks – Page Builder Features <= 3.2.36 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Timer

    MediumCVSS 5.4No exploitEPSS 0%

    kadencewp · gutenberg blocks with aiMay 14, 2024

  • CVE-2024-3189
    21Monitor

    Gutenberg Blocks by Kadence Blocks – Page Builder Features <= 3.2.37 - Authenticated (Contributor+) Stored Cross-Site Scripting

    MediumCVSS 5.4No exploitEPSS 0%

    kadencewp · gutenberg blocks with aiMay 14, 2024

  • CVE-2024-6884
    21Monitor

    Gutenberg Blocks with AI by Kadence WP < 3.2.39 - Contributor+ Stored XSS

    MediumCVSS 5.4No exploitEPSS 0%

    kadencewp · gutenberg blocks with aiAug 8, 2024

  • CVE-2024-2919
    21Monitor

    Gutenberg Blocks by Kadence Blocks – Page Builder Features <= 3.2.31 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via CountUp Widget

    MediumCVSS 5.4No exploitEPSS 0%

    kadencewp · gutenberg blocks with aiApr 3, 2024

  • CVE-2024-4481
    21Monitor

    Gutenberg Blocks with AI by Kadence WP <= 3.2.36 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block Link

    MediumCVSS 5.4No exploitEPSS 0%

    kadencewp · gutenberg blocks with aiMay 14, 2024

  • CVE-2024-10637
    21Monitor

    Kadence Blocks < 3.2.54 - Admin+ Stored XSS

    MediumCVSS 5.4No exploitEPSS 0%

    kadencewp · gutenberg blocks with aiDec 12, 2024

  • CVE-2024-9655
    21Monitor

    Gutenberg Blocks with AI by Kadence WP – Page Builder Features <= 3.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Icon Widget

    MediumCVSS 5.4No exploitEPSS 0%

    kadencewp · gutenberg blocks with aiNov 1, 2024

  • CVE-2024-5289
    21Monitor

    Gutenberg Blocks with AI by Kadence WP – Page Builder Features <= 3.2.42 - Authenticated (Contributor+) Stored Cross-Site Scripting in Google Maps Widget

    MediumCVSS 5.4No exploitEPSS 0%

    kadencewp · gutenberg blocks with aiJun 26, 2024

  • CVE-2024-2273
    21Monitor

    Gutenberg Blocks by Kadence Blocks – Page Builder Features <= 3.2.34 - Authenticated (Contributor+) Stored Cross-Site Scripting

    MediumCVSS 5.4No exploitEPSS 0%

    kadencewp · gutenberg blocks with aiMay 2, 2024

  • CVE-2025-5678
    21Monitor

    Kadence Blocks – Gutenberg Blocks for Page Builder Features <= 3.5.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via `redirectURL` Parameter

    MediumCVSS 5.4No exploitEPSS 0%

    kadencewp · gutenberg blocks with aiJul 8, 2025

  • CVE-2024-4208
    21Monitor

    Gutenberg Blocks by Kadence Blocks – Page Builder Features <= 3.2.37 - Authenticated (Contributor+) Stored Cross-Site Scripting via Typer Effect

    MediumCVSS 5.4No exploitEPSS 0%

    kadencewp · gutenberg blocks with aiMay 14, 2024

  • CVE-2024-5819
    21Monitor

    Gutenberg Blocks with AI by Kadence WP – Page Builder Features <= 3.2.45 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via HTML Data Attr

    MediumCVSS 5.4No exploitEPSS 0%

    kadencewp · gutenberg blocks with aiJun 29, 2024