CVE-2023-40211

HIGHNuclei

WordPress Post Grid Plugin <= 2.2.50 is vulnerable to Sensitive Data Exposure

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2023-40211 has a selected CVSS score of 7.5 (high); EIP currently links 1 Nuclei template.

Description

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in PickPlugins Post Grid Combo – 36+ Gutenberg Blocks.This issue affects Post Grid Combo – 36+ Gutenberg Blocks: from n/a through 2.2.50.

Description source: CVE List

Exploitation context

Known exploitation

VulnCheck KEV
Listed · Aug 14, 2023 · VulnCheck
Reported exploitation
Observed · VulnCheck

Available material

Nuclei templates
1

Affected products and versions

2
ProductSourceVersion range

Post Grid Combo – 36+ Gutenberg Blocks

Browse PickPlugins / Post Grid Combo – 36+ Gutenberg Blockspost-grid

Default status: unaffected

CVE ListThrough 2.2.50affected

post_grid_combo

Browse pickplugins / post_grid_combo
VulnCheckVersion data not supplied

Nuclei templates

1
ProjectDiscoveryHIGHPost Grid <= 2.2.50 - Information Exposure via REST APICVSS 7.5

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in PickPlugins Post Grid Combo – 36+ Gutenberg Blocks.This issue affects Post Grid Combo – 36+ Gutenberg Blocks: from n/a through 2.2.50.

Impact

Unauthorized actors can access sensitive information, leading to privacy breaches and potential misuse of data.

Remediation

Update to the latest version beyond 2.2.50 or apply available security patches.

WeaknessesCWE-200
Authorsdaffainfo
Template tagscvecve2023wpwordpresswp-pluginpickpluginspost-gridvkev
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CPE: cpe:2.3:a:pickplugins:post_grid_combo:*:*:*:*:*:wordpress:*:*
FOFA: body="/wp-content/plugins/post-grid-combo/"
https://patchstack.com/database/vulnerability/post-grid/wordpress-post-grid-combo-plugin-2-2-50-sensitive-data-exposure-vulnerability?_s_id=cve https://plugins.trac.wordpress.org/changeset/2947951/post-grid/trunk/src/functions-rest.php https://nvd.nist.gov/vuln/detail/CVE-2023-40211

Source: ProjectDiscovery

References

2