CVE-2026-2608: Stellarwp Kadence Blocks — Page Builder Toolkit For Gutenberg Editor

Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days.

The Kadence Blocks — Page Builder Toolkit for Gutenberg Editor plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 3.5.32. This makes it possible for authenticated attackers, with Contributor-level access and above, to perform an unauthorized action.

Affected products

• Stellarwp Kadence Blocks — Page Builder Toolkit For Gutenberg Editor: up to and including 3.5.32

Published 2026-02-17. Last modified 2026-06-17.