Gutenberg Blocks With Ai By Kadence Wp – Page Builder Features

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:britner:gutenberg_blocks_with_ai_by_kadence_wp_–_page_builder_features:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorBritner (d66ab27b-0725-5938-8163-826a2cbb5237)
ProductGutenberg Blocks With Ai By Kadence Wp – Page Builder Features (ff5a029f-e436-5c1a-9687-3cf32989d021)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-1291 vulnerable 2026-06-08 07:08:36.262217 Gutenberg Blocks by Kadence Blocks <= 3.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'icon'
MEDIUM (6.4)
The Gutenberg Blocks with AI by Kadence WP – Page Builder Features plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘icon’ parameter in all versions up to, and including, 3.4.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Published: 2025-03-01T08:23:20.853Z
Updated: 2026-04-08T17:11:40.587Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-5289 vulnerable 2026-06-08 06:56:15.426387 Gutenberg Blocks with AI by Kadence WP – Page Builder Features <= 3.2.42 - Authenticated (Contributor+) Stored Cross-Site Scripting in Google Maps Widget
MEDIUM (6.4)
The Gutenberg Blocks with AI by Kadence WP – Page Builder Features plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Google Maps widget parameters in all versions up to, and including, 3.2.42 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Published: 2024-06-27T02:03:02.736Z
Updated: 2026-04-08T17:34:14.798Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2919 vulnerable 2026-06-08 06:35:27.705567 Gutenberg Blocks by Kadence Blocks – Page Builder Features <= 3.2.31 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via CountUp Widget
MEDIUM (6.4)
The Gutenberg Blocks by Kadence Blocks – Page Builder Features plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the CountUp Widget in all versions up to, and including, 3.2.31 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Published: 2024-04-04T02:32:40.024Z
Updated: 2026-04-08T17:16:40.356Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10785 vulnerable 2026-06-08 06:23:47.543962 Gutenberg Blocks with AI by Kadence WP – Page Builder Features <= 3.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
MEDIUM (6.4)
The Gutenberg Blocks with AI by Kadence WP – Page Builder Features plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Countdown' widget in all versions up to, and including, 3.3.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Published: 2024-11-21T04:24:25.355Z
Updated: 2026-04-08T16:48:28.142Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.