Skip to content
Sign in
5.3 Medium

CVE-2024-13796 The Post Grid and Gutenberg Blocks – ComboBlocks plugin for WordPress is vulnerable to Sensitive Information Exposure in…

Description

The Post Grid and Gutenberg Blocks – ComboBlocks plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.3.6 via the /wp-json/post-grid/v2/get_users REST API This makes it possible for unauthenticated attackers to extract sensitive data including including emails and other user data.

Affected products and versions

Product Affected versions Fixed in
Post Grid and Gutenberg Blocks – ComboBlocks 2.3 earliest → 2.3.6 No fix stated
Post Grid 2.3 earliest → 2.3.6 No fix stated

Other CVEs of Post Grid and Gutenberg Blocks – ComboBlocks

The 3 CVEs of Post Grid and Gutenberg Blocks – ComboBlocks →
CVE-2024-13798 The Post Grid and Gutenberg Blocks – ComboBlocks plugin for WordPress is vulnerable to unauthorized order creation in… 5.3 Medium CVE-2024-9636 The Post Grid and Gutenberg Blocks plugin for WordPress is vulnerable to privilege escalation in versions 2.2.85 to… 9.8 Critical
Track this CVE