Veille CVE

Recherche « pickplugins Post Grid »

1 CVE

  1. CVE-2024-11080 9.8 Critique

    pickplugins Post Grid

    The Post Grid and Gutenberg Blocks – ComboBlocks plugin for WordPress is vulnerable to Unauthenticated Hook Injection in versions 2.2.32 to 2.3.1 via several functions in the ~/includes/blocks/form-wrap/function.php file. This makes it possible for unauthenticated attackers to execute actions with hooks in WordPress, granted no other security controls are present in the function.