CVE-2021-24652CWE-863

PostX Gutenberg Blocks for Post Grid < 2.4.10 - Missing Access Controls

published September 27, 2021

CVSS
—
EPSS
1%
Percentile
53.2
In the wild
Unconfirmed
What it is

The PostX – Gutenberg Blocks for Post Grid WordPress plugin before 2.4.10 performs incorrect checks before allowing any logged in user to perform some ajax based requests, allowing any user to modify, delete or add ultp_options values.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00716 · 53.2th percentile
Weakness
CWE-863 · Incorrect Authorization
Published
2021-09-27T15:25Z
EPSS history
Timeline
  • 27 SEP 15:25Z
    PostX Gutenberg Blocks for Post Grid < 2.4.10 - Missing Access Controls
    cvelistv5