CVE-2021-24661 PostX Gutenberg Blocks Saved Templates Addon < 2.4.10 - Private Content Disclosure

2021-09-2715:25:35

CWE-200

WPScan

www.cve.org

4.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.7%

JSON

The PostX – Gutenberg Blocks for Post Grid WordPress plugin before 2.4.10, with Saved Templates Addon enabled, allows users with Contributor roles or higher to read password-protected or private post contents the user is otherwise unable to read, given the post ID.

CNA Affected

[
  {
    "product": "PostX – Gutenberg Blocks for Post Grid",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThan": "2.4.10",
        "status": "affected",
        "version": "2.4.10",
        "versionType": "custom"
      }
    ]
  }
]