CVE-2026-104762 | StellarWP Kadence Blocks Plugin up to 3.7.12 on WordPress Block Font Family Attribute cross site scripting

October 10, 2026 Yanac

A vulnerability, which was classified as problematic, was found in StellarWP Kadence Blocks Plugin up to 3.7.12 on WordPress. The impacted element is an unknown function of the component Block Font Family Attribute. The manipulation results in cross site scripting.

This vulnerability is reported as CVE-2026-104762. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More