5.3
Moyenne
CVE-2024-13796 The Post Grid and Gutenberg Blocks – ComboBlocks plugin for WordPress is vulnerable to Sensitive Information Exposure in…
Description
The Post Grid and Gutenberg Blocks – ComboBlocks plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.3.6 via the /wp-json/post-grid/v2/get_users REST API This makes it possible for unauthenticated attackers to extract sensitive data including including emails and other user data.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Post Grid and Gutenberg Blocks – ComboBlocks 2.3 | premières → 2.3.6 | Pas de correctif indiqué |
| Post Grid 2.3 | premières → 2.3.6 | Pas de correctif indiqué |