VULNERABILITY INTELLIGENCE

CVE-2021-24652

CVSS score6.5 MEDIUM
EPSS probability0.72%
CISA KEVNot currently listed
Published2021-09-27
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Description

The PostX – Gutenberg Blocks for Post Grid WordPress plugin before 2.4.10 performs incorrect checks before allowing any logged in user to perform some ajax based requests, allowing any user to modify, delete or add ultp_options values.

Weakness classification

  • contact@wpscan.com: CWE-863
  • nvd@nist.gov: CWE-863

Primary references