Not rated
CVE-2021-24661 The PostX – Gutenberg Blocks for Post Grid WordPress plugin before 2.4.10, with Saved Templates Addon enabled, allows…
Description
The PostX – Gutenberg Blocks for Post Grid WordPress plugin before 2.4.10, with Saved Templates Addon enabled, allows users with Contributor roles or higher to read password-protected or private post contents the user is otherwise unable to read, given the post ID.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| PostX – Gutenberg Blocks for Post Grid 2.4 | earliest → < 2.4.10 | 2.4.10 |
Other CVEs of PostX – Gutenberg Blocks for Post Grid
The 4 CVEs of PostX – Gutenberg Blocks for Post Grid →
CVE-2021-24660
The PostX – Gutenberg Blocks for Post Grid WordPress plugin before 2.4.10, with Saved Templates Addon enabled, allows…
Not rated
CVE-2021-24659
The PostX – Gutenberg Blocks for Post Grid WordPress plugin before 2.4.10 allows users with a role as low as Contributor…
Not rated
CVE-2021-24652
The PostX – Gutenberg Blocks for Post Grid WordPress plugin before 2.4.10 performs incorrect checks before allowing…
Not rated