CVE-2024-9636: Post Grid and Gutenberg Blocks 2.2.85 - 2.3.3 - Unauthenticated Privilege Escalation
The Post Grid and Gutenberg Blocks plugin for WordPress is vulnerable to privilege escalation in versions 2.2.85 to 2.3.3. This is due to the plugin not properly restricting what user meta can be updated during profile registration. This makes it possible for unauthenticated attackers to register on the site as an administrator.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-9636?
The severity of CVE-2024-9636 is considered high due to the potential for privilege escalation.
How do I fix CVE-2024-9636?
To fix CVE-2024-9636, update the Post Grid and Gutenberg Blocks plugin to version 2.3.4 or later.
Who is affected by CVE-2024-9636?
CVE-2024-9636 affects users of the Post Grid and Gutenberg Blocks plugin for WordPress versions 2.2.85 to 2.3.3.
What does CVE-2024-9636 exploit?
CVE-2024-9636 exploits improper restrictions on user meta updates during profile registration.
Is CVE-2024-9636 a remote vulnerability?
Yes, CVE-2024-9636 is a remote vulnerability allowing unauthenticated attackers to escalate privileges.