Sensitive Information Exposure in Post Grid and Gutenberg Blocks Plugin for WordPress

CVE-2024-13796

Summary

The Post Grid and Gutenberg Blocks – ComboBlocks plugin for WordPress is susceptible to sensitive information exposure due to improper access controls in the /wp-json/post-grid/v2/get_users REST API endpoint. This vulnerability allows unauthenticated attackers to gain access to sensitive user data, including email addresses and other personal information, potentially leading to privacy breaches. Web administrators must take immediate action to secure their sites by updating to the latest version, ensuring that sensitive data is adequately protected.

References