CVE Database /
CVE-2026-18435
CVE · Medium
CVE-2026-18435 — Kadence Blocks — Page Builder Toolkit for Gutenberg Editor [kadence-blocks] < 3.7.8.1
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2026-18435
|
Kadence Blocks — Page Builder Toolkit for Gutenberg Editor [kadence-blocks] < 3.7.8.1 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
Medium
6.4
|
< 3.7.8.1
|
3.7.8.1 |
2026-07-31 |
—
|
CVE-2026-18435
The Kadence Blocks plugin for WordPress contains a security flaw affecting versions up to 3.7.8. Inadequate validation of certain block attributes allows malicious users with contributor privileges or higher to embed executable code into pages, which can then be triggered by anyone accessing those pages. This vulnerability enables the execution of arbitrary web scripts on affected sites.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings