CVE-2026-2826 | stellarwp Kadence Blocks Plugin up to 3.6.3 on WordPress REST API Endpoint process_pattern upload_files authorization

A vulnerability classified as critical was found in stellarwp Kadence Blocks Plugin up to 3.6.3 on WordPress. The affected element is the function upload_files of the file process_pattern of the component REST API Endpoint. Executing a manipulation can lead to missing authorization.

This vulnerability is handled as CVE-2026-2826. The attack can be executed remotely. There is not any exploit available.

Upgrading the affected component is advised.