5.4
Medium
CVE-2024-0881 The Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel WordPress plugin before 2.2.76…
Description
The Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel WordPress plugin before 2.2.76 does not have proper authorization, resulting in password protected posts to be displayed in the result of some unauthenticated AJAX actions, allowing unauthenticated users to read such posts
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| post_grid 2.2 | earliest → < 2.2.76 | 2.2.76 |
| Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel 2.2 | earliest → < 2.2.76 | 2.2.76 |
Other CVEs of post_grid
The 4 CVEs of post_grid →
CVE-2021-4450
The Post Grid plugin for WordPress is vulnerable to blind SQL Injection via post metadata in versions up to, and…
8.8
High
CVE-2024-8253
The Post Grid and Gutenberg Blocks plugin for WordPress is vulnerable to privilege escalation in all versions 2.2.87…
8.8
High
CVE-2024-32816
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in PickPlugins Post Grid.This issue affects…
7.5
High