Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
wpexploitApple502jWPEX-ID:8D966FF1-9C88-43C7-8F4B-93C88E214677
HistoryAug 26, 2021 - 12:00 a.m.

PostX Gutenberg Blocks Saved Templates Addon < 2.4.10 - Private Content Disclosure

2021-08-2600:00:00
apple502j
278

0.001 Low

EPSS

Percentile

22.7%

JSON

The plugin, with Saved Templates Addon enabled, allows users with Contributor roles or higher to read password-protected or private post contents the user is otherwise unable to read, given the post ID.

If the post 1234, created by other users, is set as private, save [gutenberg_post_blocks id="1234"] and preview. The private post's contents will be displayed.

Related

prion 1
nvd 1
cve 1
cvelist 1
patchstack 1
wpvulndb 1
prion
prion
Default credentials
2021-09-27 16:15:00
nvd
nvd
CVE-2021-24661
2021-09-27 16:15:09
cve
cve
CVE-2021-24661
2021-09-27 16:15:09
cvelist
cvelist
CVE-2021-24661 PostX Gutenberg Blocks Saved Templates Addon < 2.4.10 - Private Content Disclosure
2021-09-27 15:25:35
patchstack
patchstack
WordPress PostX – Gutenberg Blocks for Post Grid plugin <= 2.4.9 - Private Content Disclosure vulnerability
2021-08-26 00:00:00
wpvulndb
wpvulndb
PostX Gutenberg Blocks Saved Templates Addon < 2.4.10 - Private Content Disclosure
2021-08-26 00:00:00

0.001 Low

EPSS

Percentile

22.7%

JSON
Related for WPEX-ID:8D966FF1-9C88-43C7-8F4B-93C88E214677
prion1nvd1cve1cvelist1patchstack1wpvulndb1