CVE-2021-24652

Summary

The PostX – Gutenberg Blocks for Post Grid WordPress plugin before 2.4.10 performs incorrect checks before allowing any logged in user to perform some ajax based requests, allowing any user to modify, delete or add ultp_options values.

Affected Software

VendorProductVersion RangeStatus
UnknownPostX – Gutenberg Blocks for Post Grid2.4.10 < 2.4.10affected

Weaknesses

  • CWE-863: CWE-863 Incorrect Authorization

ADP Enrichment

CVE Program Container

Additional References

References