一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年9月6日

CVE-2024-11080 [CRITICAL] – The Post Grid and Gutenberg Blocks – ComboBlocks plugin for WordPress is vulnerable to Una

未分类
📑 文章目录

The Post Grid and Gutenberg Blocks – ComboBlocks plugin for WordPress is vulnerable to Unauthenticated Hook Injection in versions 2.2.32 to 2.3.1 via several functions in the ~/includes/blocks/form-wrap/function.php file. This makes it possible for unauthenticated attackers to execute actions with hooks in WordPress, granted no other security controls are present in the function.