Plugin icon

Smart Post – Post Grid, Post Carousel, Post Slider Gutenberg Blocks for Blog & News

post-carousel

Vulnerabilities:

7

Last Updated:

September 2, 2026

Active Installs:

20000

Published
Title
Fixed in
CVSS
Published
2026-09-03
Title
Post Carousel 4.0.0 - 4.0.7 - Contributor+ Private and Protected Post Content Disclosure via saved-templates-duplicate IDOR
Fixed in
Fixed in 4.0.8
CVSS
2.7 (low)
Published
2026-09-03
Title
Post Carousel 4.0.0 - 4.0.7 - Unauthenticated Password-Protected Post Content and post_password Disclosure via sp_handle_post_id
Fixed in
Fixed in 4.0.8
CVSS
5.3 (medium)
Published
2026-04-13
Title
Smart Post Show – Post Grid, Post Carousel & Slider, and List Category Posts < 3.0.13 - Authenticated (Administrator+) PHP Object Injection
Fixed in
Fixed in 3.0.13
CVSS
7.2 (high)
Published
2024-07-17
Title
Smart Post Show <= 3.0.0 - Editor+ Stored XSS
Fixed in
Fixed in 3.0.1
CVSS
3.5 (low)
Published
2024-04-04
Title
Post Grid, Post Carousel, & List Category Posts < 2.4.28 - Editor+ Stored XSS
Fixed in
Fixed in 2.4.28
CVSS
3.5 (low)
Published
2023-01-06
Title
Post Grid, Post Carousel, & List Category Posts < 2.4.19 - Contributor+ Stored XSS
Fixed in
Fixed in 2.4.19
CVSS
6.8 (medium)
Published
2021-08-16
Title
Post Carousel < 2.3.5 - CSRF Bypass / Unauthorised AJAX Calls
Fixed in
Fixed in 2.3.5
CVSS
5.4 (medium)