Now officially on WordPress.org

CVE Database / CVE-2023-39923

CVE · Medium

CVE-2023-39923 — The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid [the-post-grid] < 7.2.8

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2023-39923 The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid [the-post-grid] < 7.2.8 Cross-Site Request Forgery (CSRF) Medium 5.4 < 7.2.8 7.2.8 2023-08-07 —

CVE-2023-39923

The Post Grid plugin through version 7.2.7 contains a cross-site request forgery vulnerability in the save_block_css() function due to inadequate nonce verification. An unauthenticated attacker can exploit this flaw to alter block CSS settings if they successfully deceive a site administrator into clicking a malicious link. The vulnerability was patched in version 7.2.8.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.

Run a free scan Get the plugin (free)

See the full security page for this plugin Browse the CVE database Browse all security findings