Post Grid Gutenberg Blocks and WordPress Blog Plugin – PostX, CVE-2021-24652
- CVE, Research URL
- Home page URL
-
Security reports for Post Grid Gutenberg Blocks and WordPress Blog Plugin – PostX
- Published on
- Sep 27, 2021
- Research Description
- The PostX – Gutenberg Blocks for Post Grid WordPress plugin before 2.4.10 performs incorrect checks before allowing any logged in user to perform some ajax based requests, allowing any user to modify, delete or add ultp_options values.
- Affected versions
-
max 2.4.10.
- Status
-
vulnerable