WordPress ComboBlocks Plugin Unauthenticated Hook Injection

The Post Grid and Gutenberg Blocks – ComboBlocks plugin for WordPress is vulnerable to Unauthenticated Hook Injection in versions 2.2.32 to 2.3.1.

This is due to several functions in the ~/includes/blocks/form-wrap/function.php file, allowing unauthenticated attackers to execute actions with hooks in WordPress, provided no other security controls are present in the function.