CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
What the vulnerability does
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in PickPlugins Post Grid Combo – 36+ Gutenberg Blocks.This issue affects Post Grid Combo – 36+ Gutenberg Blocks: from n/a through 2.2.50.
Explanation of Vulnerability in Simple Terms
Post Grid Combo contains an information exposure vulnerability that allows unauthenticated attackers to read sensitive data over the network without user interaction. The plugin fails to properly restrict access to protected information. Site administrators should update immediately to a patched version.
What an attacker can do
Read sensitive data from the site without logging in or user interaction.
Potential impact on your site
Confidential information may be exposed to anyone on the internet without your knowledge.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
