What is GHSA-f7w9-vf85-gjj5?

GHSA-f7w9-vf85-gjj5 is a security advisory published by GitHub Security Advisories with Medium severity. The Post Grid Gutenberg Blocks WordPress plugin before 5.0.41 does not perform an authorization...

Which CVE IDs does GHSA-f7w9-vf85-gjj5 cover?

GHSA-f7w9-vf85-gjj5 covers the following CVE IDs: CVE-2026-86783. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-f7w9-vf85-gjj5?

GHSA-f7w9-vf85-gjj5 has a CVSS v3 base score of 5.3, published by GitHub Security Advisories.

GHSA-f7w9-vf85-gjj5MediumCVSS 5.3

The Post Grid Gutenberg Blocks WordPress plugin before 5.0.41 does not perform an authorization...

Vendor

GitHub Security Advisories

Published

September 23, 2026

Last Modified

September 23, 2026

🔗 CVE IDs covered (1)

CVE-2026-86783 →

📋 Description

The Post Grid Gutenberg Blocks WordPress plugin before 5.0.41 does not perform an authorization or post-visibility check on a REST API route that returns the custom field keys of a given post, allowing unauthenticated users to disclose the custom field key names of arbitrary posts, including private, draft, pending, scheduled and password-protected posts.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-86783
https://wpscan.com/vulnerability/719fc130-748b-4bad-8091-2858664299ed
https://github.com/advisories/GHSA-f7w9-vf85-gjj5