CVE-2026-12902

Name of the Vulnerable Software and Affected Versions Kadence Blocks — Page Builder Toolkit for Gutenberg Editor versions prior to 3.7.8

Description An authorization bypass exists because the plugin fails to properly verify if a user is authorized to perform specific actions. Authenticated attackers with contributor-level access or higher can bypass the upload files capability boundary to create arbitrary Media Library attachments. This is achieved by downloading remote images to the site's uploads directory using the wp upload bits() and wp insert attachment() functions.

Recommendations Update Kadence Blocks — Page Builder Toolkit for Gutenberg Editor to version 3.7.8 or later.