https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T20:06:50.940518+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-0881 CVE-2024-0881 — Combo Blocks < 2.2.76 - Unauthenticated Password Protected Posts Access 2026-10-07T20:06:50.941959+00:00

Affected: Unknown Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel, pickplugins post_grid

The Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel WordPress plugin before 2.2.76 does not have proper authorization, resulting in password protected posts to be displayed in the result of some unauthenticated AJAX actions, allowing unauthenticated users to read such posts