← CVE Intelligence

CVE-2024-1330

Kadence Blocks Pro < 2.3.8 - Contributor+ Arbitrary Option Access PUBLISHED

Description (CNA)

The kadence-blocks-pro WordPress plugin before 2.3.8 does not prevent users with at least the contributor role using some of its shortcode's functionalities to leak arbitrary options from the database.

Affected (CNA)

Vendor / productVersions
Unknown / kadence-blocks-proaffected 0 before 2.3.8

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.