Skip to content
OpenAdvisories
Unscored CVE-2021-24661 EUVD-2021-11573GHSA-f6jc-q8w3-xvwj

PostX Gutenberg Blocks Saved Templates Addon < 2.4.10 - Private Content Disclosure

Published Sep 27, 2021 · Updated Aug 3, 2024 · Assigned by WPScan

Description

The PostX – Gutenberg Blocks for Post Grid WordPress plugin before 2.4.10, with Saved Templates Addon enabled, allows users with Contributor roles or higher to read password-protected or private post contents the user is otherwise unable to read, given the post ID.

Affected products

VendorProductAffectedFixed
— PostX – Gutenberg Blocks for Post Grid 2.4.10 – < 2.4.10 2.4.10

References