Skip to content
OpenAdvisories

Vendor

wpxpo

36 known vulnerabilities.

2 results · Clear filters · Feed

  • High 8.8
    CVE-2024-10728 Public exploit EPSS 39%

    PostX <= 4.1.16 - Missing Authorization to Arbitrary Plugin Installation/Activation

    The Post Grid Gutenberg Blocks and WordPress Blog Plugin – PostX plugin for WordPress is vulnerable to unauthorized plugin installation/activation due to a missing capability check on the 'install_required_plugin_callback' function in all versions up to, and …

  • High 8.8
    CVE-2024-5326 Public exploit

    Post Grid Gutenberg Blocks and WordPress Blog Plugin – PostX <= 4.1.2 - Missing Authorization to Arbitrary Options Update

    The Post Grid Gutenberg Blocks and WordPress Blog Plugin – PostX plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'postx_presets_callback' function in all versions up to, and including, 4.1.2. Th…