CVE-2024-5326 Post Grid Gutenberg Blocks and WordPress Blog Plugin – PostX <= 4.1.2 - Missing Authorization to Arbitrary Options Update

🗓️ 30 May 2024 10:59:29Reported by WordfenceType

CVE-2024-5326 Post Grid Gutenberg Blocks and WordPress Blog Plugin vulnerabilit

Reporter	Title	Published	Views	Family All 12
GithubExploit	Exploit for CVE-2024-5326	14 Jun 202407:12	–	githubexploit
BDU FSTEC	The vulnerability of the postx_presets_callback() function in the PostX plugin of the WordPres content management system allows a hacker to escalate their privileges and gain access to read, modify, or delete data.	7 Jun 202400:00	–	bdu_fstec
Circl	CVE-2024-5326	1 Jun 202404:30	–	circl
CNNVD	WordPress plugin PostX 安全漏洞	30 May 202400:00	–	cnnvd
CVE	CVE-2024-5326	30 May 202410:59	–	cve
NVD	CVE-2024-5326	30 May 202411:15	–	nvd
Patchstack	WordPress Post Grid Gutenberg Blocks and WordPress Blog Plugin - PostX plugin <= 4.1.2 - Missing Authorization to Arbitrary Options Update vulnerability	2 Feb 202608:22	–	patchstack
Positive Technologies	PT-2024-4002 · WordPress · Post Grid Gutenberg Blocks/Wordpress Blog Plugin	28 May 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-5326	5 Feb 202506:15	–	redhatcve
Vulnrichment	CVE-2024-5326 Post Grid Gutenberg Blocks and WordPress Blog Plugin – PostX <= 4.1.2 - Missing Authorization to Arbitrary Options Update	30 May 202410:59	–	vulnrichment

[
  {
    "vendor": "wpxpo",
    "product": "Post Grid Gutenberg Blocks for News, Magazines, Blog Websites – PostX",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "4.1.2",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
plugins	www.plugins.trac.wordpress.org/changeset/3093815/
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/07a3db33-3787-4b63-835d-8e3026206842
plugins	www.plugins.trac.wordpress.org/browser/ultimate-post/trunk/classes/Styles.php
plugins	www.plugins.trac.wordpress.org/browser/ultimate-post/trunk/classes/Styles.php

08 Apr 2026 16:34Current

8.4High risk

Vulners AI Score8.4

CVSS 3.18.8

EPSS0.52926

CWE-862