5.4
Moyenne
CVE-2024-0881 The Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel WordPress plugin before 2.2.76…
Description
The Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel WordPress plugin before 2.2.76 does not have proper authorization, resulting in password protected posts to be displayed in the result of some unauthenticated AJAX actions, allowing unauthenticated users to read such posts
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| post_grid 2.2 | premières → < 2.2.76 | 2.2.76 |
| Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel 2.2 | premières → < 2.2.76 | 2.2.76 |
Autres CVE de post_grid
Les 4 CVE de post_grid →
CVE-2021-4450
The Post Grid plugin for WordPress is vulnerable to blind SQL Injection via post metadata in versions up to, and…
8.8
Élevée
CVE-2024-8253
The Post Grid and Gutenberg Blocks plugin for WordPress is vulnerable to privilege escalation in all versions 2.2.87…
8.8
Élevée
CVE-2024-32816
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in PickPlugins Post Grid.This issue affects…
7.5
Élevée