VulnSocial

CVE-2026-1273Disclosure

LOWCVSS 7.2 · HIGH

Signal is active with 4 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

The Post Grid Gutenberg Blocks for News, Magazines, Blog Websites – PostX plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 5.0.8 via the `/ultp/v3/starter_dummy_post/` and `/ultp/v3/starter_import_content/` REST API endpoints. This makes it possible for authenticated attackers, with Administrator-level access and above, to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-918

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 4 mentions across 1 observed day

What's happening

  • Technical details provided in 3 signals
  • Disclosure: 4 classified signals
  • 4 total mentions across 1 day

Deep dive

Activity timeline4 mentions / 1d
01234Mentions · 2026-03-04: 4Technical Details · 2026-03-04: 303-04
Signal classification1 categories
Disclosure
4100.0%
Referenced assets4 URLs
Full discourse4 posts
  • CVEarity@CVEarity
    Disclosure

    ⚡ New CVE Alert: CVE-2026-1273 📊 Severity: 7.2 🚨 Risk Level: High 🧩 Affects: Wordpress Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-1273 #CVE-2026-1273 #CVE #High #Wordpress #CyberSecurity #InfoSec https://t.co/K0ozwe26o6

    Post summary

    A new CVE-2026-1273 with severity 7.2 affecting WordPress is announced, referencing the NVD link; however, no exploit, patch, or technical details are disclosed.

    0000034
    64 followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-1273 Server-Side Request Forgery in PostX WordPress Plugin via REST API Endpoints https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-1273

    Post summary

    A new Server‑Side Request Forgery vulnerability (CVE‑2026‑1273) affecting the PostX WordPress plugin via its REST API endpoints has been disclosed.

    0000057
    4.0K followersView on X
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-1273 The Post Grid Gutenberg Blocks for News, Magazines, Blog Websites – PostX plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and i… https://www.cve.org/CVERecord?id=CVE-2026-1273 ----- Traducción: CVE-2026-1273 Los… http://infoflow.cloud`

    Post summary

    The post announces CVE‑2026‑1273, a Server‑Side Request Forgery vulnerability in the PostX WordPress plugin, without indicating exploitation, mitigation, or PoC details.

    0000027
    55 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-1273 The Post Grid Gutenberg Blocks for News, Magazines, Blog Websites – PostX plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and i… https://www.cve.org/CVERecord?id=CVE-2026-1273

    Post summary

    CVE-2026-1273 is a Server‑Side Request Forgery vulnerability affecting the PostX plugin for WordPress; the brief notice provides the vulnerability type but no PoC, exploit, or patch details.

    00000348
    56.6K followersView on X

Explore more

Back to dashboard