CVE Intelligence

PickPlugins Post Grid vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting PickPlugins Post Grid: 1 record(s), with affected versions and fixes.

CVE-2024-11080 Critical · 9.8 CWE-94 Sep 5, 2026
Post Grid and Gutenberg Blocks – ComboBlocks 2.2.85 - 2.3.32 - Unauthenticated Hook Injection
The Post Grid and Gutenberg Blocks – ComboBlocks plugin for WordPress is vulnerable to Unauthenticated Hook Injection in versions 2.2.32 to 2.3.1 via several functions in the ~/includes/blocks/form-wrap/function.php file. This makes it possible for unauthenticated attackers to execute actions with hooks in WordPress, granted no other security controls are present in the function.