CVE-2024-1330: Kadencewp Kadence Blocks Pro

Medium severity, CVSS 4.3. EPSS: 0.4% chance of exploitation in the next 30 days.

The kadence-blocks-pro WordPress plugin before 2.3.8 does not prevent users with at least the contributor role using some of its shortcode's functionalities to leak arbitrary options from the database.

Affected products

• Kadencewp Kadence Blocks Pro: before 2.3.8 (fixed in 2.3.8)

Published 2024-06-27. Last modified 2026-06-17.