CVE-2024-1330 — Kadence Blocks Pro < 2.3.8 - Contributor+ Arbitrary Option Access
The kadence-blocks-pro WordPress plugin before 2.3.8 does not prevent users with at least the contributor role using some of its shortcode's functionalities to leak arbitrary op…
Published: 2024-06-27 · CVSS: 4.3 · CVSS 3.1
The kadence-blocks-pro WordPress plugin before 2.3.8 does not prevent users with at least the contributor role using some of its shortcode's functionalities to leak arbitrary options from the database.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7