CVE-2025-63043 — Authorization Bypass Through User-Controlled Key in Post Grid AND Gutenberg Blocks

CWE-639 — Authorization Bypass Through User-Controlled Key4 documents4 sources
Severity
9.8CRITICAL
No vector
EPSS
0.0%
top 93.01%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Pickplugins Post Grid AND Gutenberg Blocks
Timeline
PublishedDec 18

Description

Authorization Bypass Through User-Controlled Key vulnerability in PickPlugins Post Grid and Gutenberg Blocks post-grid allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post Grid and Gutenberg Blocks: from n/a through <= 2.3.23.

Affected Packages1 packages

🔴Vulnerability Details

2
CVEList
WordPress Post Grid and Gutenberg Blocks plugin <= 2.3.23 - Insecure Direct Object References (IDOR) vulnerability↗2025-12-18
▶
GHSA
GHSA-8vqx-g979-q6fh: Authorization Bypass Through User-Controlled Key vulnerability in PickPlugins Post Grid and Gutenberg Blocks allows Exploiting Incorrectly Configured↗2025-12-18
▶

🕵️Threat Intelligence

1
Wiz
CVE-2025-63043 Impact, Exploitability, and Mitigation Steps | Wiz↗
▶
CVE-2025-63043 — CRITICAL severity | cvebase