CVE-2024-35731

MEDIUM 5.4CVE-2024-35731 · Published 08/06/2024 · updated 17/06/2026

In short

CVE-2024-35731 is a MEDIUM (CVSS 5.4) vulnerability affecting kenta blocks (wpmoose).
Chance of exploitation in the next 30 days (EPSS): 0.27%, higher than 19.3% of all vulnerabilities.
Fix: update to 1.4.0 or later.

Package	Affected versions	Patched versions
kenta blocks wpmoose	`< 1.4.0`	`1.4.0`

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WP Moose Kenta Gutenberg Blocks Responsive Blocks and block templates library for Gutenberg Editor allows Stored XSS.This issue affects Kenta Gutenberg Blocks Responsive Blocks and block templates library for Gutenberg Editor: from n/a through 1.3.9.

References

patchstack.com/database/vulnerability/kenta-blocks/wordpress-kenta-gutenberg-blocks-plugin-1-3-9-cross-site-scripting-xss-vulnerability · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free