Vulnerabilities > Kadencewp > High

DATE CVE VULNERABILITY TITLE RISK
2025-01-24 CVE-2025-24753 Missing Authorization vulnerability in Kadencewp Gutenberg Blocks With AI
Missing Authorization vulnerability in Kadence WP Gutenberg Blocks by Kadence Blocks allows Exploiting Incorrectly Configured Access Control Security Levels.
network
low complexity
kadencewp CWE-862
8.8
2023-11-06 CVE-2023-47186 Unspecified vulnerability in Kadencewp Kadence Woocommerce Email Designer
Cross-Site Request Forgery (CSRF) vulnerability in Kadence WP Kadence WooCommerce Email Designer plugin <= 1.5.11 versions.
network
low complexity
kadencewp
8.8
2023-01-09 CVE-2022-3679 Unspecified vulnerability in Kadencewp Starter Templates 1.2.17
The Starter Templates by Kadence WP WordPress plugin before 1.2.17 unserialises the content of an imported file, which could lead to PHP object injection issues when an admin import (intentionally or not) a malicious file and a suitable gadget chain is present on the blog.
network
low complexity
kadencewp
8.8
2022-10-25 CVE-2022-3335 Unspecified vulnerability in Kadencewp Kadence Woocommerce Email Designer
The Kadence WooCommerce Email Designer WordPress plugin before 1.5.7 unserialises the content of an imported file, which could lead to PHP object injections issues when an admin import (intentionally or not) a malicious file and a suitable gadget chain is present on the blog.
network
low complexity
kadencewp
7.2