CVE Database /
CVE-2024-37482
CVE · Medium
CVE-2024-37482 — The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid [the-post-grid] < 7.7.5
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2024-37482
|
The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid [the-post-grid] < 7.7.5 |
Missing Authorization |
Medium
4.3
|
< 7.7.5
|
7.7.5 |
2024-07-04 |
—
|
CVE-2024-37482
The Post Grid plugin for WordPress contains a flaw in multiple AJAX functions that fail to verify user permissions before executing actions, affecting versions through 7.7.4. Authenticated users with subscriber privileges or higher can exploit this vulnerability to carry out unauthorized modifications to data and perform actions they should not be able to access.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings