CVE-2026-18435

MediumCVSS 6.4

Published: 01/08/2026(UTC)Updated: 12/08/2026(UTC)Translated: 01/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.19%

9th percentile - higher than 9% of all known CVEs

Summary

The Kadence Blocks — Page Builder Toolkit for Gutenberg Editor plugin for WordPress is vulnerable to stored cross-site scripting via the 'toggleIcon' block attribute. Authenticated attackers with contributor-level access can inject arbitrary scripts that execute when a user accesses the page.

Risk Assessment

An attacker can steal user session data or perform other malicious actions within the site context.

Recommendation

Update the Kadence Blocks plugin to a version that improves input sanitization and output escaping.

Other vulnerabilities in Kadence Blocks — Page Builder Toolkit for Gutenberg Editor

CVE-2026-11357Medium
The Kadence Blocks — Page Builder Toolkit for Gutenberg Editor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to and including 3.7.5. This allows authenticated attackers with contributor-level access and above to extract the site's connected Kadence account license key, license owner email, and other sensitive data from the browser console.

Original NVD description (English source)

The Kadence Blocks — Page Builder Toolkit for Gutenberg Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'toggleIcon' Block Attribute in all versions up to, and including, 3.7.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS