WP Vulnerability WatchVulnerability data as of September 7, 2026

Known vulnerabilities in Kadence Blocks — Page Builder Toolkit for Gutenberg Editor

20+ Gutenberg Blocks with endless options, enabling top-notch efficiency for high-performance dynamic website creation.

28Reported vulnerabilities
9.8Highest CVSS score
3.7.9.1Latest version
600,000+Active installs

What to do now

Update Kadence Blocks — Page Builder Toolkit for Gutenberg Editor to 3.7.8.1 or later. 28 of these have a fixed version available. Updating resolves them.

Plugin last updated: August 12, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVESeverityExploit probability
next 30 days		 Affected versionsFixed inPublished
WF-a4562535-ef69-4337-b03e-0b7c869cb042 Critical 9.8 — Before 3.1.11 3.1.11 August 9, 2023
CVE-2025-1291 Medium 6.4 0.3% 0 to 3.4.9 (inclusive) 3.4.10 March 1, 2025
CVE-2024-24888 Medium 6.4 0.3% 3.2.25 and earlier 3.2.26 March 29, 2024
CVE-2024-23500 Medium 6.4 0.5% 3.2.19 and earlier 3.2.20 March 26, 2024
CVE-2026-18435 Medium 6.4 0.2% 0 to 3.7.8 (inclusive) 3.7.8.1 August 1, 2026
CVE-2026-18062 Medium 6.4 0.2% 0 to 3.7.8.1 (inclusive) 3.7.8.2 August 1, 2026
CVE-2024-9655 Medium 5.4 0.3% Before 3.3.2 3.3.2 November 1, 2024
CVE-2024-5819 Medium 5.4 0.3% Before 3.2.46 3.2.46 June 29, 2024
CVE-2024-5289 Medium 5.4 0.3% Before 3.2.43 3.2.43 June 27, 2024
CVE-2024-4863 Medium 5.4 0.5% Before 3.2.39 3.2.39 June 14, 2024
CVE-2024-3189 Medium 5.4 0.4% Before 3.2.38 3.2.38 May 15, 2024
CVE-2024-4481 Medium 5.4 0.3% Before 3.2.37 3.2.37 May 14, 2024
CVE-2024-4209 Medium 5.4 0.4% Before 3.2.37 3.2.37 May 14, 2024
CVE-2024-1999 Medium 5.4 0.5% Before 3.2.26 3.2.26 April 9, 2024
CVE-2024-2919 Medium 5.4 0.3% Before 3.2.32 3.2.32 April 4, 2024
CVE-2024-1541 Medium 5.4 0.5% 3.2.23 and earlier 3.2.24 March 13, 2024
CVE-2025-5678 Medium 5.4 0.2% Before 3.5.11 3.5.11 July 9, 2025
CVE-2024-12304 Medium 5.4 0.2% Before 3.4.3 3.4.3 January 11, 2025
CVE-2026-66696 Medium 4.3 0.2% 3.7.8 and earlier 3.7.8.1 July 29, 2026
CVE-2026-15286 Medium 4.3 0.4% 0 to 3.5.32 (inclusive) 3.6.0 July 10, 2026
CVE-2026-12904 Medium 4.3 0.5% 0 to 3.7.7 (inclusive) 3.7.8 July 1, 2026
CVE-2026-12902 Medium 4.3 0.5% 0 to 3.7.7 (inclusive) 3.7.8 July 1, 2026
CVE-2026-11357 Medium 4.3 0.3% 0 to 3.7.5 (inclusive) 3.7.6 June 18, 2026
CVE-2026-2826 Medium 4.3 0.3% 0 to 3.6.3 (inclusive) 3.6.4 April 4, 2026
CVE-2026-2633 Medium 4.3 0.3% 0 to 3.6.1 (inclusive) 3.6.2 February 18, 2026
CVE-2026-1857 Medium 4.3 0.3% 0 to 3.6.1 (inclusive) 3.6.2 February 18, 2026
CVE-2026-2608 Medium 4.3 0.2% 3.5.32 and earlier 3.6.0 February 11, 2026
CVE-2025-24753 Medium 4.3 0.4% 3.3.1 and earlier 3.3.2 January 24, 2025

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.