CVE-2023-6964 Gutenberg Blocks by Kadence Blocks – Page Builder Features <= 3.1.26 - Authenticated(Contributor+) Server-Side Request Forgery (SSRF)

🗓️ 09 Apr 2024 18:59:15Reported by WordfenceType

The Gutenberg Blocks by Kadence Blocks plugin for WordPress is vulnerable to Server-Side Request Forgery via 'kadence_import_get_new_connection_data' AJAX action

Reporter	Title	Published	Views	Family All 10
CNNVD	WordPress Plugin Gutenberg Blocks by Kadence Blocks 安全漏洞	9 Apr 202400:00	–	cnnvd
CVE	CVE-2023-6964	9 Apr 202418:59	–	cve
EUVD	EUVD-2023-59160	3 Oct 202520:07	–	euvd
NVD	CVE-2023-6964	9 Apr 202419:15	–	nvd
Patchstack	WordPress Gutenberg Blocks by Kadence Blocks Plugin <= 3.1.26 is vulnerable to Server Side Request Forgery (SSRF)	11 Apr 202400:00	–	patchstack
Patchstack	WordPress Gutenberg Blocks by Kadence Blocks – Page Builder Features plugin <= 3.1.26 - Authenticated Server-Side Request Forgery (SSRF) vulnerability	11 Apr 202412:54	–	patchstack
RedhatCVE	CVE-2023-6964	23 May 202502:04	–	redhatcve
Vulnrichment	CVE-2023-6964 Gutenberg Blocks by Kadence Blocks – Page Builder Features <= 3.1.26 - Authenticated(Contributor+) Server-Side Request Forgery (SSRF)	9 Apr 202418:59	–	vulnrichment
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (April 8, 2024 to April 14, 2024)	18 Apr 202415:58	–	wordfence
WPVulnDB	Kadence Blocks < 3.2.12 - Contributor+ Server-Side Request Forgery	10 Apr 202400:00	–	wpvulndb

[
  {
    "vendor": "stellarwp",
    "product": "Kadence Blocks — Page Builder Toolkit for Gutenberg Editor",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "3.1.26",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
plugins	www.plugins.trac.wordpress.org/changeset
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/b01ad77f-2349-48bb-b4e9-f7cbce435de9

08 Apr 2026 17:15Current

8.4High risk

Vulners AI Score8.4

CVSS 3.18.5

EPSS0.00343

CWE-918