CVE Intelligence

Vulnerabilidades do PickPlugins Post Grid

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam PickPlugins Post Grid: 1 registro(s), com versões afetadas e correções.

CVE-2024-11080 Crítica · 9.8 CWE-94 05/09/2026
Post Grid and Gutenberg Blocks – ComboBlocks 2.2.85 - 2.3.32 - Unauthenticated Hook Injection
The Post Grid and Gutenberg Blocks – ComboBlocks plugin for WordPress is vulnerable to Unauthenticated Hook Injection in versions 2.2.32 to 2.3.1 via several functions in the ~/includes/blocks/form-wrap/function.php file. This makes it possible for unauthenticated attackers to execute actions with hooks in WordPress, granted no other security controls are present in the function.