Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:wordpress:the_post_grid_and_gutenberg_blocks_comboblocks:*:*:*:*:*:*:*:*

1 brief RSS
critical advisory

Unauthenticated Hook Injection in The Post Grid and Gutenberg Blocks Plugin

The Post Grid and Gutenberg Blocks - ComboBlocks plugin for WordPress contains an unauthenticated hook injection vulnerability in versions 2.2.32 to 2.3.1 that allows remote attackers to execute arbitrary actions via hook functions.

The Post Grid and Gutenberg Blocks – ComboBlocks wordpress cve web-application injection
1t 1c