Postx Gutenberg Blocks For Post Grid
Approved changes feed: RSS · Atom
cpe:2.3:a:wpxpo:postx_-_gutenberg_blocks_for_post_grid:*:*:*:*:*:wordpress:*:*
part: a version: * update: *
| Vendor | Wpxpo (c5bc2b74-4fb9-5b98-a1a9-71c128f75636) |
|---|---|
| Product | Postx Gutenberg Blocks For Post Grid (6eede24e-2959-5c90-8515-335510ddb071) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | wordpress |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-10728 |
vulnerable | 2026-06-08 06:23:47.378330 |
PostX <= 4.1.16 - Missing Authorization to Arbitrary Plugin Installation/Activation
HIGH (8.8)
The Post Grid Gutenberg Blocks and WordPress Blog Plugin – PostX plugin for WordPress is vulnerable to unauthorized plugin installation/activation due to a missing capability check on the 'install_required_plugin_callback' function in all versions up to, and including, 4.1.16. This makes it possible for authenticated attackers, with Subscriber-level access and above, to install and activate arbitrary plugins which can be leveraged to achieve remote code execution if another vulnerable plugin is installed and activated.
Published: 2024-11-16T04:29:15.146Z
Updated: 2026-04-08T16:33:58.119Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-24661 |
vulnerable | 2026-06-08 05:30:38.960957 |
PostX Gutenberg Blocks Saved Templates Addon < 2.4.10 - Private Content Disclosure
The PostX – Gutenberg Blocks for Post Grid WordPress plugin before 2.4.10, with Saved Templates Addon enabled, allows users with Contributor roles or higher to read password-protected or private post contents the user is otherwise unable to read, given the post ID.
Published: 2021-09-27T15:25:35.000Z
Updated: 2024-08-03T19:42:16.109Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-24660 |
vulnerable | 2026-06-08 05:30:38.960572 |
PostX Gutenberg Blocks Saved Templates Addon < 2.4.10 - Contributor+ Stored Cross-Site Scripting
The PostX – Gutenberg Blocks for Post Grid WordPress plugin before 2.4.10, with Saved Templates Addon enabled, allows users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks via the plugin's shortcode.
Published: 2021-09-27T15:25:33.000Z
Updated: 2024-08-03T19:35:20.414Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-24659 |
vulnerable | 2026-06-08 05:30:38.960158 |
PostX Gutenberg Blocks for Post Grid < 2.4.10 - Contributor+ Stored Cross-Site Scripting
The PostX – Gutenberg Blocks for Post Grid WordPress plugin before 2.4.10 allows users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks via the plugin's block.
Published: 2021-09-27T15:25:32.000Z
Updated: 2024-08-03T19:35:20.408Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-24652 |
vulnerable | 2026-06-08 05:30:38.947952 |
PostX Gutenberg Blocks for Post Grid < 2.4.10 - Missing Access Controls
The PostX – Gutenberg Blocks for Post Grid WordPress plugin before 2.4.10 performs incorrect checks before allowing any logged in user to perform some ajax based requests, allowing any user to modify, delete or add ultp_options values.
Published: 2021-09-27T15:25:30.000Z
Updated: 2024-08-03T19:35:20.368Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.