PT-2024-19902 · Kadence Blocks · Kadence Wp Gutenberg Blocks

Rafie Muhammad · Published 2024-03-27 · Updated 2025-02-07 · CVE-2024-23500

Positive Technologies (AI Summary)

CVSS v3.1

7.7

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Kadence WP Gutenberg Blocks versions through 3.2.19

Description The issue is a Server-Side Request Forgery (SSRF) vulnerability. It affects Kadence WP Gutenberg Blocks by Kadence Blocks.

Recommendations For versions through 3.2.19, update to a version later than 3.2.19 to resolve the issue.

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2024-23500

Affected Products

Kadence Wp Gutenberg Blocks

References · 7

• https://patchstack.com/database/vulnerability/kadence-blocks/wordpress-kadence-blocks-plugin-3-2-19-server-side-request-forgery-ssrf-vulnerability?_s_id=cve · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-23500 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-23500 · Security Note
• https://patchstack.com/database/Wordpress/Plugin/kadence-blocks/vulnerability/wordpress-kadence-blocks-plugin-3-2-19-server-side-request-forgery-ssrf-vulnerability?_s_id=cve · Note
• https://t.me/cvenotify/74961 · Telegram Post
• https://t.me/cvenotify/110409 · Telegram Post
• https://twitter.com/CVEnew/status/1773237976782279160 · Twitter Post