← volver
CVE-2021-24652

PostX Gutenberg Blocks for Post Grid < 2.4.10 - Missing Access Controls

EPSS 0.7%CWE-863
The PostX – Gutenberg Blocks for Post Grid WordPress plugin before 2.4.10 performs incorrect checks before allowing any logged in user to perform some ajax based requests, allowing any user to modify, delete or add ultp_options values.

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →