CVE-2021-24652: PostX Gutenberg Blocks for Post Grid < 2.4.10 - Missing Access Controls
The PostX – Gutenberg Blocks for Post Grid WordPress plugin before 2.4.10 performs incorrect checks before allowing any logged in user to perform some ajax based requests, allowing any user to modify, delete or add ultpoptions values.
Other sources
The PostX – Gutenberg Blocks for Post Grid WordPress plugin before 2.4.10 performs incorrect checks before allowing any logged in user to perform some ajax based requests, allowing any user to modify, delete or add ultpoptions values.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2021-24652.
What is the affected software?
The affected software is PostX – Gutenberg Blocks for Post Grid WordPress plugin before version 2.4.10.
What does the vulnerability allow an attacker to do?
The vulnerability allows any logged-in user to modify, delete, or add ultp_options values.
What is the severity of CVE-2021-24652?
The severity of CVE-2021-24652 is medium with a CVSS score of 6.5.
Is there a fix available for this vulnerability?
Yes, the fix for this vulnerability is to update to version 2.4.10 of the PostX – Gutenberg Blocks for Post Grid WordPress plugin.