Medium severity5.3NVD Advisory· Published Feb 22, 2025· Updated Jun 17, 2026
CVE-2024-13798
CVE-2024-13798
Description
The Post Grid and Gutenberg Blocks – ComboBlocks plugin for WordPress is vulnerable to unauthorized order creation in all versions up to, and including, 2.3.5. This is due to insufficient verification on form fields. This makes it possible for unauthenticated attackers to create new orders for products and mark them as paid without actually completing a payment.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4<=2.3.5+ 1 more
- (no CPE)range: <=2.3.5
- (no CPE)
- Range: 0
Patches
Vulnerability mechanics
References
2- plugins.trac.wordpress.org/changesetnvdPatch
- www.wordfence.com/threat-intel/vulnerabilities/id/705823ff-e9c3-4b8b-b71c-3b60d0d15b01nvdThird Party Advisory
News mentions
0No linked articles in our index yet.