CVE-2021-24652: vulnerability in PostX – Gutenberg Blocks for Post Grid
PostX Gutenberg Blocks for Post Grid < 2.4.10 - Missing Access Controls
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 0.7%
The PostX – Gutenberg Blocks for Post Grid WordPress plugin before 2.4.10 performs incorrect checks before allowing any logged in user to perform some ajax based requests, allowing any user to modify, delete or add ultp_options values.
Affected products
Unknown · PostX – Gutenberg Blocks for Post GridRelated CVEs — PostX – Gutenberg Blocks for Post Grid
In the same product, most dangerous first.
CVE-2021-24661—PostX Gutenberg Blocks Saved Templates Addon < 2.4.10 - Private Content DisclosureEPSS 0.8%CVE-2021-24659—PostX Gutenberg Blocks for Post Grid < 2.4.10 - Contributor+ Stored Cross-Site ScriptingEPSS 0.5%CVE-2021-24660—PostX Gutenberg Blocks Saved Templates Addon < 2.4.10 - Contributor+ Stored Cross-Site ScriptingEPSS 0.5%