Medium severity5.3NVD Advisory· Published Feb 28, 2025· Updated Jun 17, 2026
CVE-2024-13796
CVE-2024-13796
Description
The Post Grid and Gutenberg Blocks – ComboBlocks plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.3.6 via the /wp-json/post-grid/v2/get_users REST API This makes it possible for unauthenticated attackers to extract sensitive data including including emails and other user data.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:pickplugins:post_grid:*:*:*:*:*:wordpress:*:*+ 1 more
- cpe:2.3:a:pickplugins:post_grid:*:*:*:*:*:wordpress:*:*range: <2.3.7
- (no CPE)range: 0
- Range: <=2.3.6
Patches
Vulnerability mechanics
References
3News mentions
0No linked articles in our index yet.