Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: wpxpo Component: Postx - Gutenberg Blocks For Post Grid Clear all filters
TI-2021-06943 CVE-2021-24661 · GHSA-f6jc-q8w3-xvwj

PostX Gutenberg Blocks Saved Templates Addon < 2.4.10 - Private Content Disclosure

Priority LOW 21

The PostX – Gutenberg Blocks for Post Grid WordPress plugin before 2.4.10, with Saved Templates Addon enabled, allows users with Contributor roles or higher to read password-protected or private post contents the user is…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00764 Published 2021-09-27 Fixed in 2.4.10 CWE-200
TI-2021-06942 CVE-2021-24660 · GHSA-4gw5-jrj4-5wc6

PostX Gutenberg Blocks Saved Templates Addon < 2.4.10 - Contributor+ Stored Cross-Site Scripting

Priority LOW 25

The PostX – Gutenberg Blocks for Post Grid WordPress plugin before 2.4.10, with Saved Templates Addon enabled, allows users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks via the plugin'…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00534 Published 2021-09-27 Fixed in 2.4.10 CWE-79
TI-2021-06934 CVE-2021-24652 · GHSA-9758-6rv3-3xpp

PostX Gutenberg Blocks for Post Grid < 2.4.10 - Missing Access Controls

Priority LOW 30

The PostX – Gutenberg Blocks for Post Grid WordPress plugin before 2.4.10 performs incorrect checks before allowing any logged in user to perform some ajax based requests, allowing any user to modify, delete or add ultp_…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00716 Published 2021-09-27 Fixed in 2.4.10 CWE-863