CVE-2021-24652

6.5 mediumEPSS 0.7%

Medium (6.5) in wpxpo postx - gutenberg blocks for post grid. EPSS 0.7% chance of exploitation in the next 30 days.

The PostX – Gutenberg Blocks for Post Grid WordPress plugin before 2.4.10 performs incorrect checks before allowing any logged in user to perform some ajax based requests, allowing any user to modify, delete or add ultp_options values.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 53% of CVEs (scores of 2026-10-31)
CWE: CWE-863
Published: 2021-09-27
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

wpxpo:postx_-_gutenberg_blocks_for_post_grid

References

https://wpscan.com/vulnerability/5375bd3e-a30d-4f24-9b17-470b28a8231c
https://wpscan.com/vulnerability/5375bd3e-a30d-4f24-9b17-470b28a8231c

Check your stack JSON