CVE-2025-24753

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-24753
Missing Authorization vulnerability in StellarWP Gutenberg Blocks by Kadence Blocks kadence-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Gutenberg Blocks by Kadence Blocks: from n/a through <= 3.3.1.

8.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://patchstack.com/database/Wordpress/Plugin/kadence-blocks/vulnerability/wordpress-kadence-blocks-plugin-3-3-1-broken-access-control-vulnerability?_s_id=cve Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:kadencewp:gutenberg_blocks_with_ai:*:*:*:*:*:wordpress:*:*
History

01 Apr 2026, 17:18

Type Values Removed Values Added
Summary (en) Missing Authorization vulnerability in Kadence WP Gutenberg Blocks by Kadence Blocks allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Gutenberg Blocks by Kadence Blocks: from n/a through 3.3.1. (en) Missing Authorization vulnerability in StellarWP Gutenberg Blocks by Kadence Blocks kadence-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Gutenberg Blocks by Kadence Blocks: from n/a through <= 3.3.1.
CVSS v2 : unknown
v3 : 4.3 		v2 : unknown
v3 : 8.8
References
  • {'url': 'https://patchstack.com/database/wordpress/plugin/kadence-blocks/vulnerability/wordpress-kadence-blocks-plugin-3-3-1-broken-access-control-vulnerability?_s_id=cve', 'tags': ['Third Party Advisory'], 'source': 'audit@patchstack.com'}
  • () https://patchstack.com/database/Wordpress/Plugin/kadence-blocks/vulnerability/wordpress-kadence-blocks-plugin-3-3-1-broken-access-control-vulnerability?_s_id=cve - Third Party Advisory

07 Feb 2025, 14:39

Type Values Removed Values Added
References () https://patchstack.com/database/wordpress/plugin/kadence-blocks/vulnerability/wordpress-kadence-blocks-plugin-3-3-1-broken-access-control-vulnerability?_s_id=cve - () https://patchstack.com/database/wordpress/plugin/kadence-blocks/vulnerability/wordpress-kadence-blocks-plugin-3-3-1-broken-access-control-vulnerability?_s_id=cve - Third Party Advisory
First Time Kadencewp gutenberg Blocks With Ai
Kadencewp
CPE cpe:2.3:a:kadencewp:gutenberg_blocks_with_ai:*:*:*:*:*:wordpress:*:*
Summary
  • (es) La vulnerabilidad de falta de autorización en Kadence WP Gutenberg Blocks by Kadence Blocks permite explotar niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Gutenberg Blocks de Kadence Blocks: desde n/a hasta 3.3.1.

24 Jan 2025, 18:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-01-24 18:15

Updated : 2026-04-01 17:18

NVD link : CVE-2025-24753

Mitre link : CVE-2025-24753

CVE.ORG link : CVE-2025-24753

JSON object : View

Products Affected

kadencewp

  • gutenberg_blocks_with_ai
CWE
CWE-862

Missing Authorization