PostX WordPress Plugin Missing Authorization Vulnerability in Share Count Callback

A vulnerability exists in the Post Grid Gutenberg Blocks for News, Magazines, Blog Websites – PostX plugin for WordPress, in all versions through 5.0.5. The issue arises from a lack of proper capability checks in the 'ultp_shareCount_callback()' function, allowing unauthorized users to modify the 'share_count' post meta for any post, including those that are private or in draft status.

Impact

Exploitation of this vulnerability allows for unauthorized modification of post meta data, specifically the share count, on private or draft posts.

Remediation

Users are advised to update the PostX plugin to version 5.0.6 or later.