CVE-2021-24652: Wpxpo Postx - Gutenberg Blocks For Post Grid

Medium severity, CVSS 6.5. EPSS: 0.7% chance of exploitation in the next 30 days.

The PostX – Gutenberg Blocks for Post Grid WordPress plugin before 2.4.10 performs incorrect checks before allowing any logged in user to perform some ajax based requests, allowing any user to modify, delete or add ultp_options values.

Affected products

• Wpxpo Postx - Gutenberg Blocks For Post Grid: before 2.4.10 (fixed in 2.4.10)

Published 2021-09-27. Last modified 2026-06-17.