Missing Authorization in PickPlugins Post Grid and Gutenberg Blocks

Publication date: 2025-12-18

Last updated on: 2026-04-23

Assigner: Patchstack

Description

Missing Authorization vulnerability in PickPlugins Post Grid and Gutenberg Blocks post-grid allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post Grid and Gutenberg Blocks: from n/a through <= 2.3.17.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-12-18

Last Modified

2026-04-23

Generated

2026-07-06

AI Q&A

2025-12-18

EPSS Evaluated

2026-07-05

NVD

CVE-2025-66058

Affected Vendors & Products

Vendor	Product	Version / Range
pickplugins	post_grid	*
pickplugins	gutenberg_blocks	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-862	The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

Executive Summary

This vulnerability is a Missing Authorization issue in PickPlugins Post Grid and Gutenberg Blocks. It allows attackers to exploit incorrectly configured access control security levels, potentially bypassing authorization checks.

Impact Analysis

The vulnerability can lead to unauthorized access to sensitive data or functionality within the affected plugins, potentially resulting in data exposure or misuse since the CVSS score indicates high confidentiality impact.

Hi! I’m here to help you understand CVE-2025-66058. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70