VulnSocial

CVE-2024-11080Patch

LOWCVSS 9.8 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

The Post Grid and Gutenberg Blocks – ComboBlocks plugin for WordPress is vulnerable to Unauthenticated Hook Injection in versions 2.2.32 to 2.3.1 via several functions in the ~/includes/blocks/form-wrap/function.php file. This makes it possible for unauthenticated attackers to execute actions with hooks in WordPress, granted no other security controls are present in the function.

Back to dashboard
0.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-94

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Patch or workaround signal is available
  • 3 mentions across 3 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 2 signals
  • Technical details provided in 2 signals
  • Disclosure: 1 classified signal
  • Peaked 2d ago at 1 mentions (2026-09-05); latest day: 1
  • 3 total mentions across 3 days

Deep dive

Activity timeline3 mentions / 3d
00111Mentions · 2026-09-05: 1Mentions · 2026-09-06: 1Mentions · 2026-09-14: 1Patch / Workaround · 2026-09-06: 1Patch / Workaround · 2026-09-14: 1Technical Details · 2026-09-05: 1Technical Details · 2026-09-06: 109-0509-0609-14
Signal classification2 categories
Patch
266.7%
Disclosure
133.3%
Referenced assets4 URLs
Classification over time
DateTotalLabels
2026-09-051
Disclosure1
2026-09-061
Patch1
2026-09-141
Patch1
Full discourse3 posts
  • KMO.partners@Kmo_Partners
    Patch

    Update Post Grid/ComboBlocks nu: kritieke WordPress-lek zonder login https://www.kmo.partners/2026/09/14/comboblocks-post-grid-cve-2024-11080-update-2-3-9/ https://www.kmo.partners/wp-content/uploads/2026/09/comboblocks-post-grid-cve-2024-11080-1600x900-1.jpg #beveiligingsupdate #comboblocks #cyberveiligheid #plugins #postGrid #website #wordpress https://t.co/ecxuM6qgAl

    Post summary

    The tweet announces a critical WordPress vulnerability in the Post Grid/ComboBlocks plugin and urges users to update the plugin immediately, indicating a patch is available.

    0000035
    9 followersView on X
  • ADK Cyber@ADKCyber
    Patch

    CVE-2024-11080 (CVSS 9.8) impacts ComboBlocks WP plugin 2.2.32–2.3.1. Organizations using it should update promptly. https://nvd.nist.gov/vuln/detail/CVE-2024-11080 via NVD Recent High CVSS #CyberSecurity #InfoSec #Vulnerability #AI #MachineLearning https://t.co/hR8XNcsmtx

    Post summary

    The tweet alerts that CVE-2024-11080 is a high‑severity vulnerability affecting ComboBlocks WP plugin versions 2.2.32–2.3.1, and it urges users to apply patches, but does not provide PoC, exploit code, or evidence of active attacks.

    0000036
    93 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2024-11080 The Post Grid and Gutenberg Blocks – ComboBlocks plugin for WordPress is vulnerable to Unauthenticated Hook Injection in versions 2.2.32 to 2.3.1 via several function… https://www.cve.org/CVERecord?id=CVE-2024-11080

    Post summary

    CVE‑2024‑11080 is disclosed as an unauthenticated hook injection flaw affecting ComboBlocks plugin versions 2.2.32‑2.3.1.

    000001.3K
    58.1K followersView on X

Explore more

Back to dashboard