Read the docs

wpxpo

Records47All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high16CVSS 7.0–8.9

Exploited now

wpxpo records in CISA KEV

No wpxpo vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Postx 7 records HIGH Postx - Gutenberg Blocks For Post Grid 4 records LOW Wholesalex 4 records MEDIUM Wowstore 1 record MEDIUM

Records

4 records in Postx - Gutenberg Blocks For Post Grid · all components

TI-2021-06934 CVE-2021-24652 · GHSA-9758-6rv3-3xpp

PostX Gutenberg Blocks for Post Grid < 2.4.10 - Missing Access Controls

Priority LOW 30

The PostX – Gutenberg Blocks for Post Grid WordPress plugin before 2.4.10 performs incorrect checks before allowing any logged in user to perform some ajax based requests, allowing any user to modify, delete or add ultp_…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00716 Published 2021-09-27 Fixed in 2.4.10 CWE-863
TI-2021-06942 CVE-2021-24660 · GHSA-4gw5-jrj4-5wc6

PostX Gutenberg Blocks Saved Templates Addon < 2.4.10 - Contributor+ Stored Cross-Site Scripting

Priority LOW 25

The PostX – Gutenberg Blocks for Post Grid WordPress plugin before 2.4.10, with Saved Templates Addon enabled, allows users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks via the plugin'…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00534 Published 2021-09-27 Fixed in 2.4.10 CWE-79
TI-2021-06943 CVE-2021-24661 · GHSA-f6jc-q8w3-xvwj

PostX Gutenberg Blocks Saved Templates Addon < 2.4.10 - Private Content Disclosure

Priority LOW 21

The PostX – Gutenberg Blocks for Post Grid WordPress plugin before 2.4.10, with Saved Templates Addon enabled, allows users with Contributor roles or higher to read password-protected or private post contents the user is…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00764 Published 2021-09-27 Fixed in 2.4.10 CWE-200
Open these records in search →