4.3
Medium
CVE-2024-7418 The The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid plugin for WordPress is vulnerable…
Description
The The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 7.7.11 via the post_query_guten and post_query functions. This makes it possible for authenticated attackers, with contributor-level access and above, to extract information from posts that are not public (i.e. draft, future, etc..).
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid 7.7 | earliest → 7.7.11 | No fix stated |
References
- www.wordfence.com www.wordfence.com
- plugins.trac.wordpress.org plugins.trac.wordpress.org
- plugins.trac.wordpress.org plugins.trac.wordpress.org
- plugins.trac.wordpress.org plugins.trac.wordpress.org
Timeline
- Published
- Last modified