CVE-2025-66058

CWE-862 — Missing Authorization4 documents4 sources
Severity
9.8CRITICAL
No vector
EPSS
0.0%
top 93.04%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Pickplugins Post Grid AND Gutenberg Blocks
Timeline
PublishedDec 18

Description

Missing Authorization vulnerability in PickPlugins Post Grid and Gutenberg Blocks post-grid allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post Grid and Gutenberg Blocks: from n/a through <= 2.3.17.

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-792g-54hc-7vfp: Missing Authorization vulnerability in PickPlugins Post Grid and Gutenberg Blocks allows Exploiting Incorrectly Configured Access Control Security Lev↗2025-12-18
▶
CVEList
WordPress Post Grid and Gutenberg Blocks plugin <= 2.3.17 - Broken Access Control vulnerability↗2025-12-18
▶

🕵️Threat Intelligence

1
Wiz
CVE-2025-66058 Impact, Exploitability, and Mitigation Steps | Wiz↗
▶
CVE-2025-66058 (CRITICAL CVSS 9.8) | Missing Authorization vulnerability | cvebase.io