Site icon API Security Blog

PostX – Gutenberg Blocks for Post Grid < 3.2.4 – Incorrect Authorization

Description The PostX – Gutenberg Blocks for Post Grid plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on several REST API endpoints in versions up to, and including, 3.2.3. This makes it possible for authenticated attackers, with author-level access and above, to perform several unauthorized…Read More

Exit mobile version