The Kadence Blocks plugin for WordPress does not properly verify user authorization for certain actions, enabling authenticated users with contributor-level privileges or above to bypass upload restrictions. Specifically, these users can use functions wp_upload_bits() and wp_insert_attachment() to download remote images into the site's uploads directory, effectively creating arbitrary media attachments without having the upload_files capability. This vulnerability affects all versions up to and including 3.7.7. There is no vendor advisory or patch information currently available, and no known exploits in the wild have been reported. The CVSS 3.1 base score is 4.3, indicating a medium severity level.

An attacker with contributor-level or higher access can bypass intended upload restrictions and add arbitrary media files to the WordPress Media Library. This could lead to unauthorized content being added to the site, potentially facilitating further attacks or content manipulation. There is no direct confidentiality or availability impact reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict contributor-level access carefully and monitor for suspicious media uploads. Avoid granting upload_files capability to untrusted users. No official patch or temporary fix has been documented at this time.