CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
AI Score
Confidence
High
Software
Post Grid and Gutenberg Blocks
Type
Plugin
Vulnerable versions
<= 2.2.78
Fixed in
2.2.79
OWASP Top 10
A1: Broken Access Control
Classification
Sensitive Data Exposure
CVE
CVE-2024-32816
Patch priority
High
CVSS severity
High (7.5)
Developer
Claim ownership
PSID
4274dff100bf
Credits
Peng Zhou
Required privilege
Unauthenticated
Published
22 April, 2024
Expand full details Have additional information or questions about this entry? Let us know.
We advise to mitigate or resolve the vulnerability immediately.
Vendor | Product | Version | CPE |
---|---|---|---|
pickplugins | post_grid | * | cpe:2.3:a:pickplugins:post_grid:*:*:*:*:*:wordpress:*:* |
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
AI Score
Confidence
High