CVE-2025-62924
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk24th percentile - higher than 24% of all known CVEs
Summary
The Post Grid and Gutenberg Blocks WordPress plugin contains a missing authorization vulnerability that allows exploiting incorrectly configured access control security levels. The issue affects versions up to and including 2.3.17.
Risk Assessment
An attacker could gain unauthorized access to plugin functionality, potentially leading to unauthorized content or configuration changes.
Recommendation
Update the Post Grid and Gutenberg Blocks plugin to the latest patched version and review access control settings.
Other vulnerabilities in Post Grid and Gutenberg Blocks
Original NVD description (English source)
Missing Authorization vulnerability in PickPlugins Post Grid and Gutenberg Blocks post-grid allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post Grid and Gutenberg Blocks: from n/a through <= 2.3.17.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS