Lucene search
+L

617 matches found

NVD
NVD
added 2024/11/16 5:15 a.m.32 views

CVE-2024-10728

The Post Grid Gutenberg Blocks and WordPress Blog Plugin – PostX plugin for WordPress is vulnerable to unauthorized plugin installation/activation due to a missing capability check on the 'installrequiredplugincallback' function in all versions up to, and including, 4.1.16. This makes it possible...

8.8CVSS0.36493EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2024/11/16 4:29 a.m.29 views

CVE-2024-10728 PostX <= 4.1.16 - Missing Authorization to Arbitrary Plugin Installation/Activation

The Post Grid Gutenberg Blocks and WordPress Blog Plugin – PostX plugin for WordPress is vulnerable to unauthorized plugin installation/activation due to a missing capability check on the 'installrequiredplugincallback' function in all versions up to, and including, 4.1.16. This makes it possible...

8.8CVSS0.36493EPSS
SaveExploits1References5
Patchstack
Patchstack
added 2024/11/08 5:14 p.m.7 views

WordPress Blocks Post Grid plugin <= 1.0.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Gab Patchstack Alliance in WordPress Plugin Blocks Post Grid versions = 1.0.3...

6.5CVSS6.1AI score0.00253EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2024/11/08 2:12 p.m.5 views

WordPress Dynamic Post Grid Elementor Addon plugin <= 1.0.6 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Gab Patchstack Alliance in WordPress Plugin Dynamic Post Grid Elementor Addon versions = 1.0.6...

6.5CVSS6.1AI score0.00352EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2024/11/08 12:0 a.m.12 views

WordPress Dynamic Post Grid Elementor Addon Plugin <= 1.0.6 is vulnerable to Cross Site Scripting (XSS)

Software Dynamic Post Grid Elementor Addon Type Plugin Vulnerable versions = 1.0.6 Fixed in 1.0.7 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51852 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 5db0fa01f3bb Credits Gab Required privile...

6.5CVSS6.5AI score0.00352EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2024/11/08 12:0 a.m.12 views

WordPress Blocks Post Grid Plugin <= 1.0.3 is vulnerable to Cross Site Scripting (XSS)

Software Blocks Post Grid Type Plugin Vulnerable versions = 1.0.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51928 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID c0aa1ee5be51 Credits Gab Required privilege Contributor...

6.5CVSS6.9AI score0.00253EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2024/11/01 3:15 p.m.9 views

CVE-2024-37483

Missing Authorization vulnerability in RadiusTheme The Post Grid the-post-grid.This issue affects The Post Grid: from n/a through = 7.7.4...

5.4CVSS0.00319EPSS
SaveExploits0References1
NVD
NVD
added 2024/11/01 3:15 p.m.18 views

CVE-2024-37482

Missing Authorization vulnerability in RadiusTheme The Post Grid the-post-grid.This issue affects The Post Grid: from n/a through = 7.7.4...

4.3CVSS0.00362EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/11/01 2:18 p.m.14 views

CVE-2024-37481 WordPress The Post Grid plugin <= 7.7.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in Post Grid Team by RadiusTheme The Post Grid allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects The Post Grid: from n/a through 7.7.4...

6.5CVSS6.9AI score0.00336EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/11/01 2:18 p.m.29 views

CVE-2024-37481 WordPress The Post Grid plugin <= 7.7.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in RadiusTheme The Post Grid the-post-grid.This issue affects The Post Grid: from n/a through = 7.7.4...

6.5CVSS0.00336EPSS
SaveExploits0References1
CVE
CVE
added 2024/11/01 2:18 p.m.57 views

CVE-2024-37481

CVE-2024-37481 pertains to a Missing/Missing Authorization vulnerability in the WordPress plugin The Post Grid (RadiusTheme). Affected versions are up to 7.7.4, where the Post Grid allegedly allows access to functionality not properly constrained by ACLs, effectively enabling unauthorized actions...

6.5CVSS5.9AI score0.00336EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/11/01 2:18 p.m.13 views

CVE-2024-37482 WordPress The Post Grid plugin <= 7.7.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in Post Grid Team by RadiusTheme The Post Grid allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects The Post Grid: from n/a through 7.7.4...

4.3CVSS6.9AI score0.00362EPSS
SaveExploits0References1
CVE
CVE
added 2024/11/01 2:18 p.m.58 views

CVE-2024-37482

CVE-2024-37482 corresponds to a Missing Authorization (broken access control) vulnerability in The Post Grid (WordPress plugin by RadiusTheme). The Post Grid allows exploitation of misconfigured access control levels, affecting The Post Grid versions from n/a up to 7.7.4. Public disclosures and t...

4.3CVSS5.9AI score0.00362EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/11/01 2:18 p.m.31 views

CVE-2024-37482 WordPress The Post Grid plugin <= 7.7.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in RadiusTheme The Post Grid the-post-grid.This issue affects The Post Grid: from n/a through = 7.7.4...

4.3CVSS0.00362EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/11/01 2:18 p.m.21 views

CVE-2024-37483 WordPress The Post Grid plugin <= 7.7.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in RadiusTheme The Post Grid the-post-grid.This issue affects The Post Grid: from n/a through = 7.7.4...

5.4CVSS0.00319EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/11/01 2:18 p.m.14 views

CVE-2024-37483 WordPress The Post Grid plugin <= 7.7.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in RadiusTheme The Post Grid the-post-grid.This issue affects The Post Grid: from n/a through = 7.7.4...

5.4CVSS5.2AI score0.00319EPSS
SaveExploits0References1
CVE
CVE
added 2024/11/01 2:18 p.m.44 views

CVE-2024-37483

CVE-2024-37483 describes a Missing Authorization vulnerability in the WordPress plugin The Post Grid by RadiusTheme. The issue affects The Post Grid versions up to and including 7.7.4 and involves exploitable access control misconfigurations that permit bypassing authorization checks due to Incor...

5.4CVSS5.9AI score0.00319EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/11/01 12:0 a.m.7 views

WordPress plugin The Post Grid 安全漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

5.4CVSS6.3AI score0.00319EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/11/01 12:0 a.m.5 views

WordPress plugin The Post Grid 安全漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

4.3CVSS6.3AI score0.00362EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/11/01 12:0 a.m.6 views

WordPress plugin The Post Grid 安全漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

6.5CVSS6.3AI score0.00336EPSS
SaveExploits0References1
Rows per page
Query Builder