Plugin icon

Post Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget

post-grid-carousel-ultimate

Vulnerabilities:

7

Last Updated:

August 19, 2026

Active Installs:

900

Published
Title
Fixed in
CVSS
Published
2026-08-20
Title
Post Grid, Slider & Carousel Ultimate < 1.8.1 - Contributor+ Stored XSS via Header Title Field
Fixed in
Fixed in 1.8.1
CVSS
6.8 (medium)
Published
2025-01-27
Title
Post Grid, Slider & Carousel Ultimate < 1.7 - Authenticated (Contributor+) Local File Inclusion
Fixed in
Fixed in 1.7
CVSS
8.8 (high)
Published
2025-01-23
Title
Post Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget < 1.7 - Authenticated (Contributor+) Local File Inclusion via post_type_ajax_handler()
Fixed in
Fixed in 1.7
CVSS
7.5 (high)
Published
2025-01-23
Title
Post Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget < 1.7 - Authenticated (Contributor+) Local File Inclusion
Fixed in
Fixed in 1.7
CVSS
7.5 (high)
Published
2024-03-25
Title
Post Grid, Slider & Carousel Ultimate < 1.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 1.6.7
CVSS
6.4 (medium)
Published
2024-03-05
Title
Post Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget < 1.6.8 - Authenticated (Contributor+) PHP Object Injection in outpost_shortcode_metabox_markup
Fixed in
Fixed in 1.6.8
CVSS
8.8 (high)
Published
2022-05-26
Title
Post Grid, Slider & Carousel Ultimate < 1.5.0 - Admin+ Stored XSS
Fixed in
Fixed in 1.5.0
CVSS
3.4 (low)