WordPress plugin
Kadence Central – Site Management, Backups, Security, and Reporting security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 4 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical1
- High0
- Medium3
- Low0
All Kadence Central – Site Management, Backups, Security, and Reporting vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium4.3 | Missing Authorization ≤3.2.8Update to 3.2.9 | CVE-2026-27056 | |
| Medium5.4 | Stored Cross-Site Scripting via packages <3.0.1Update to 3.0.1 | — | |
| Medium4.3 | Cross-Site Request Forgery and Missing Authorization via 'hide_authenticate_notice' <2.1.14Update to 2.1.14 | CVE-2023-40001 | |
| Critical9.8 | Authentication Bypass <2.0.18Update to 2.0.18 | — |
- Medium4.3Missing Authorization
≤3.2.8Update to 3.2.9
- Medium5.4Stored Cross-Site Scripting via packages
<3.0.1Update to 3.0.1
- Medium4.3Cross-Site Request Forgery and Missing Authorization via 'hide_authenticate_notice'
<2.1.14Update to 2.1.14
- Critical9.8Authentication Bypass
<2.0.18Update to 2.0.18
Kadence Central – Site Management, Backups, Security, and Reporting: common questions
Does Kadence Central – Site Management, Backups, Security, and Reporting have known vulnerabilities?
Yes. VulnCrest Radar lists 4 known vulnerabilities in Kadence Central – Site Management, Backups, Security, and Reporting: 1 critical, 3 medium. None are known to affect version null.
How do I check which version of Kadence Central – Site Management, Backups, Security, and Reporting I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Kadence Central – Site Management, Backups, Security, and Reporting vulnerability?
CVE-2026-27056, published Jan 11, 2026: Solid Central – Site Management, Backups, Security, and Reporting <= 3.2.8 - Missing Authorization. Severity: Medium (CVSS 4.3).
Is any Kadence Central – Site Management, Backups, Security, and Reporting vulnerability listed in CISA KEV?
No. None of the known Kadence Central – Site Management, Backups, Security, and Reporting vulnerabilities is currently listed in the CISA KEV catalog.