Not rated
CVE-2021-24652 The PostX – Gutenberg Blocks for Post Grid WordPress plugin before 2.4.10 performs incorrect checks before allowing…
Description
The PostX – Gutenberg Blocks for Post Grid WordPress plugin before 2.4.10 performs incorrect checks before allowing any logged in user to perform some ajax based requests, allowing any user to modify, delete or add ultp_options values.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| PostX – Gutenberg Blocks for Post Grid 2.4 | earliest → < 2.4.10 | 2.4.10 |
Other CVEs of PostX – Gutenberg Blocks for Post Grid
The 4 CVEs of PostX – Gutenberg Blocks for Post Grid →
CVE-2021-24661
The PostX – Gutenberg Blocks for Post Grid WordPress plugin before 2.4.10, with Saved Templates Addon enabled, allows…
Not rated
CVE-2021-24660
The PostX – Gutenberg Blocks for Post Grid WordPress plugin before 2.4.10, with Saved Templates Addon enabled, allows…
Not rated
CVE-2021-24659
The PostX – Gutenberg Blocks for Post Grid WordPress plugin before 2.4.10 allows users with a role as low as Contributor…
Not rated