CVE-2023-7072

CVE-2023-7072 affects the Post Grid Combo – 36+ Gutenberg Blocks WordPress plugin. All versions up to 2.2.68 expose sensitive data via the get_posts REST API endpoint, allowing unauthenticated access to full draft posts, password-protected posts, and passwords. The issue is an Information Exposur...

CVE-2023-40211

The PickPlugins Post Grid Combo – 36+ Gutenberg Blocks WordPress plugin (versions through 2.2.50 ) is vulnerable to a Sensitive Data Exposure flaw. This issue allows unauthorized actors to access sensitive information via the REST API , potentially leading to privacy breaches and data misuse. The...