Skip to main content

Gutenberg Blocks By Kadence Blocks

1 CVEs product

Monthly

CVE-2026-66696 Aug 06, 14:28 MEDIUM This Month

Sensitive data exposure in the Gutenberg Blocks by Kadence Blocks WordPress plugin (versions <= 3.7.8) allows authenticated Contributor-level users to access information they should not be permitted to view. The CVSS vector (PR:L/C:L) confirms this is a low-privilege, partial confidentiality breach rather than a full data dump, limiting its severity to medium-low. No public exploit code has been identified and CISA KEV does not list this vulnerability, indicating no confirmed active exploitation at time of analysis.

WordPress Information Disclosure Wordpress Plugin Gutenberg Blocks By Kadence Blocks Nexcess
NVD
CVSS 3.1
4.3
EPSS
0.2%
EPSS 0% CVSS 4.3
MEDIUM This Month

Sensitive data exposure in the Gutenberg Blocks by Kadence Blocks WordPress plugin (versions <= 3.7.8) allows authenticated Contributor-level users to access information they should not be permitted to view. The CVSS vector (PR:L/C:L) confirms this is a low-privilege, partial confidentiality breach rather than a full data dump, limiting its severity to medium-low. No public exploit code has been identified and CISA KEV does not list this vulnerability, indicating no confirmed active exploitation at time of analysis.

WordPress Information Disclosure Wordpress Plugin +2
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy