CVE-2021-24652

The PostX – Gutenberg Blocks for Post Grid WordPress plugin before 2.4.10 performs incorrect checks before allowing any logged in user to perform some ajax based requests, allowing any user to modify, delete or add ultp_options values.

Score

CVSS 3.1 6.5 Medium

Status

Modified - contact@wpscan.com

Published

2021-09-27

Last modified

2024-08-03

Weaknesses

CWE-863

Affected products

• Postx Gutenberg Blocks For Post Grid (Unknown)
• Postx - Gutenberg Blocks For Post Grid (Wpxpo)

References

• https://wpscan.com/vulnerability/5375bd3e-a30d-4f24-9b17-470b28a8231c