Skip to content
Sign in
4.3 Medium

CVE-2024-7418 The The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid plugin for WordPress is vulnerable…

Description

The The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 7.7.11 via the post_query_guten and post_query functions. This makes it possible for authenticated attackers, with contributor-level access and above, to extract information from posts that are not public (i.e. draft, future, etc..).

Affected products and versions

Product Affected versions Fixed in
The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid 7.7 earliest → 7.7.11 No fix stated

Other CVEs of The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid

The 3 CVEs of The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid →
CVE-2024-1427 The The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid plugin for WordPress is vulnerable… 6.4 Medium CVE-2024-3936 The The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid plugin for WordPress is vulnerable… 4.3 Medium
Track this CVE