Skip to content
OpenAdvisories
Unscored CVE-2021-24652 EUVD-2021-11564GHSA-9758-6rv3-3xpp

PostX Gutenberg Blocks for Post Grid < 2.4.10 - Missing Access Controls

Published Sep 27, 2021 · Updated Aug 3, 2024 · Assigned by WPScan

Description

The PostX – Gutenberg Blocks for Post Grid WordPress plugin before 2.4.10 performs incorrect checks before allowing any logged in user to perform some ajax based requests, allowing any user to modify, delete or add ultp_options values.

Affected products

VendorProductAffectedFixed
— PostX – Gutenberg Blocks for Post Grid 2.4.10 – < 2.4.10 2.4.10

References