WP Security CheckVulnerability data as of October 22, 2026

Known vulnerabilities in Kadence Blocks — Page Builder Toolkit for Gutenberg Editor

20+ Gutenberg Blocks with endless options, enabling top-notch efficiency for high-performance dynamic website creation.

41Reported vulnerabilities
9.8Highest CVSS score
3.7.9.1Latest version
600,000+Active installs

What to do now

Update Kadence Blocks — Page Builder Toolkit for Gutenberg Editor to 3.7.12.1 or later. 41 of these have a fixed version available. Updating resolves them.

Plugin last updated: August 12, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVESeverityExploit probability
next 30 days
Affected versionsFixed inPublished
CVE-2024-2509 Medium 6.5 0.4% Before 3.2.26 3.2.26 April 5, 2024
CVE-2024-4057 Medium 6.1 0.4% Before 3.2.27 3.2.27 June 4, 2024
WF-a4562535-ef69-4337-b03e-0b7c869cb042 Critical 9.8 — Before 3.1.11 3.1.11 August 9, 2023
CVE-2024-10637 Medium 5.4 0.3% Before 3.2.54 3.2.54 December 12, 2024
CVE-2024-6884 Medium 5.4 0.4% Before 3.2.39 3.2.39 August 8, 2024
CVE-2024-12581 Medium 4.8 0.5% Before 3.2.54 3.2.54 December 13, 2024
CVE-2024-0598 Medium 4.8 0.7% Before 3.2.18 3.2.18 April 9, 2024
CVE-2026-103354 High 7.2 0.1% 3.7.11.1 and earlier 3.7.12 October 2, 2026
CVE-2026-18435 Medium 6.4 0.3% 0 to 3.7.8 (inclusive) 3.7.8.1 August 1, 2026
CVE-2026-18062 Medium 6.4 0.4% 0 to 3.7.8.1 (inclusive) 3.7.8.2 August 1, 2026
CVE-2025-1291 Medium 6.4 0.3% 0 to 3.4.9 (inclusive) 3.4.10 March 1, 2025
CVE-2023-6964 Medium 6.4 0.4% Before 3.2.12 3.2.12 April 9, 2024
CVE-2024-24888 Medium 6.4 0.3% 3.2.25 and earlier 3.2.26 March 29, 2024
CVE-2024-23500 Medium 6.4 0.5% 3.2.19 and earlier 3.2.20 March 26, 2024
CVE-2026-104762 Medium 6.4 0.2% 0 to 3.7.12 (inclusive) 3.7.12.1 October 10, 2026
CVE-2026-105890 Medium 6.4 0.2% 3.7.12 and earlier 3.7.12.1 October 8, 2026
CVE-2025-5678 Medium 5.4 0.3% Before 3.5.11 3.5.11 July 9, 2025
CVE-2024-10785 Medium 5.4 0.4% Before 3.3.4 3.3.4 November 21, 2024
CVE-2024-9655 Medium 5.4 0.3% Before 3.3.2 3.3.2 November 1, 2024
CVE-2024-5819 Medium 5.4 0.3% Before 3.2.46 3.2.46 June 29, 2024
CVE-2024-5289 Medium 5.4 0.3% Before 3.2.43 3.2.43 June 27, 2024
CVE-2024-4863 Medium 5.4 0.5% Before 3.2.39 3.2.39 June 14, 2024
CVE-2024-4208 Medium 5.4 0.3% Before 3.2.38 3.2.38 May 15, 2024
CVE-2024-3189 Medium 5.4 0.4% Before 3.2.38 3.2.38 May 15, 2024
CVE-2024-4481 Medium 5.4 0.3% Before 3.2.37 3.2.37 May 14, 2024
CVE-2024-4209 Medium 5.4 0.4% Before 3.2.37 3.2.37 May 14, 2024
CVE-2024-2273 Medium 5.4 0.3% Before 3.2.35 3.2.35 May 2, 2024
CVE-2024-1999 Medium 5.4 0.5% Before 3.2.26 3.2.26 April 9, 2024
CVE-2024-2919 Medium 5.4 0.3% Before 3.2.32 3.2.32 April 4, 2024
CVE-2024-1541 Medium 5.4 0.5% 3.2.23 and earlier 3.2.24 March 13, 2024
CVE-2024-12304 Medium 5.4 0.2% Before 3.4.3 3.4.3 January 11, 2025
CVE-2026-66696 Medium 4.3 0.3% 3.7.8 and earlier 3.7.8.1 July 29, 2026
CVE-2026-15286 Medium 4.3 0.4% 0 to 3.5.32 (inclusive) 3.6.0 July 10, 2026
CVE-2026-12904 Medium 4.3 0.5% 0 to 3.7.7 (inclusive) 3.7.8 July 1, 2026
CVE-2026-12902 Medium 4.3 0.5% 0 to 3.7.7 (inclusive) 3.7.8 July 1, 2026
CVE-2026-11357 Medium 4.3 0.3% 0 to 3.7.5 (inclusive) 3.7.6 June 18, 2026
CVE-2026-2826 Medium 4.3 0.3% 0 to 3.6.3 (inclusive) 3.6.4 April 4, 2026
CVE-2026-2633 Medium 4.3 0.4% 0 to 3.6.1 (inclusive) 3.6.2 February 18, 2026
CVE-2026-1857 Medium 4.3 0.3% 0 to 3.6.1 (inclusive) 3.6.2 February 18, 2026
CVE-2026-2608 Medium 4.3 0.4% 3.5.32 and earlier 3.6.0 February 11, 2026
CVE-2025-24753 Medium 4.3 0.4% 3.3.1 and earlier 3.3.2 January 24, 2025

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.