CVE-2024-0598

The Kadence Blocks plugin for WordPress contained a cross-site scripting vulnerability affecting versions before 3.2.18 that could permit attackers to inject and execute arbitrary scripts on websites using this page builder toolkit. An attacker could leverage this flaw to insert malicious code including redirects, ads, or other HTML content that would run when visitors accessed the compromised site. The vulnerability was discovered and reported by Akbar Kustirama and has been addressed in version 3.2.18 and later.

Based on public CVE data (MITRE/NVD).