Plugin icon

Post Grid Gutenberg Blocks for News, Magazines, Blog Websites – PostX

ultimate-post

Vulnerabilities:

24

Last Updated:

March 12, 2026

Active Installs:

40000

Published
Title
Fixed in
CVSS
Published
2026-03-03
Title
PostX < 5.0.9 - Admin+ SSRF via REST API Endpoints
Fixed in
Fixed in 5.0.9
CVSS
5.5 (medium)
Published
2026-01-19
Title
PostX < 5.0.4 - Missing Authorization
Fixed in
Fixed in 5.0.4
CVSS
5.3 (medium)
Published
2025-12-21
Title
PostX < 5.0.4 - Unauthenticated Information Exposure
Fixed in
Fixed in 5.0.4
CVSS
5.3 (medium)
Published
2025-12-20
Title
Post Grid Gutenberg Blocks for News, Magazines, Blog Websites – PostX < 5.0.4 - Missing Authorization to Unauthenticated Sensitive Information Exposure
Fixed in
Fixed in 5.0.4
CVSS
7.5 (high)
Published
2025-09-02
Title
PostX < 4.1.37 - Missing Authorization
Fixed in
Fixed in 4.1.37
CVSS
4.3 (medium)
Published
2025-08-29
Title
PostX < 4.1.36 - Authenticated (Editor+) Privilege Escalation
Fixed in
Fixed in 4.1.36
CVSS
7.2 (high)
Published
2025-03-28
Title
PostX < 4.1.26 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 4.1.26
CVSS
6.4 (medium)
Published
2024-12-02
Title
PostX < 4.1.16 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 4.1.16
CVSS
6.4 (medium)
Published
2024-11-15
Title
PostX < 4.1.17 - Missing Authorization to Arbitrary Plugin Installation/Activation
Fixed in
Fixed in 4.1.17
CVSS
8.8 (high)
Published
2024-10-28
Title
PostX < 4.1.16 - Authenticated (Author+) Stored Cross-Site Scripting
Fixed in
Fixed in 4.1.16
CVSS
6.4 (medium)
Published
2024-10-24
Title
PostX < 4.1.13 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 4.1.13
CVSS
6.4 (medium)
Published
2024-05-29
Title
Post Grid Gutenberg Blocks and WordPress Blog Plugin – PostX < 4.1.2 - Authenticated (Author+) Stored Cross-Site Scripting
Fixed in
Fixed in 4.1.2
CVSS
6.4 (medium)
Published
2024-05-29
Title
Post Grid Gutenberg Blocks and WordPress Blog Plugin – PostX < 4.1.3 - Missing Authorization to Arbitrary Options Update
Fixed in
Fixed in 4.1.3
CVSS
8.8 (high)
Published
2024-05-27
Title
Post Grid Gutenberg Blocks and WordPress Blog Plugin – PostX < 4.1.0 - Authenticated (Contributor+) Stored Cross=Site Scripting
Fixed in
Fixed in 4.1.0
CVSS
6.4 (medium)
Published
2024-05-27
Title
PostX < 4.1.0 - Contributor+ Stored XSS
Fixed in
Fixed in 4.1.0
CVSS
5.9 (medium)
Published
2024-04-22
Title
PostX < 4.0.2 - Contributor+ Stored XSS
Fixed in
Fixed in 4.0.2
CVSS
5.9 (medium)
Published
2024-04-16
Title
Post Grid Gutenberg Blocks and WordPress Blog Plugin – PostX < 4.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 4.0.2
CVSS
6.4 (medium)
Published
2024-04-05
Title
PostX – Gutenberg Blocks for Post Grid < 3.2.4 - Incorrect Authorization
Fixed in
Fixed in 3.2.4
CVSS
4.3 (medium)
Published
2023-08-02
Title
PostX - Gutenberg Post Grid Blocks < 3.0.6 - Reflected Cross-Site Scripting
Fixed in
Fixed in 3.0.6
CVSS
7.1 (high)
Published
2023-06-23
Title
PostX - Gutenberg Blocks for Post Grid < 2.9.10 - Reflected Cross-Site Scripting
Fixed in
Fixed in 2.9.10
CVSS
7.1 (high)
Published
2021-08-26
Title
PostX Gutenberg Blocks Saved Templates Addon < 2.4.10 - Contributor+ Stored Cross-Site Scripting
Fixed in
Fixed in 2.4.10
CVSS
6.8 (medium)
Published
2021-08-26
Title
PostX Gutenberg Blocks Saved Templates Addon < 2.4.10 - Private Content Disclosure
Fixed in
Fixed in 2.4.10
CVSS
4.3 (medium)
Published
2021-08-26
Title
PostX Gutenberg Blocks for Post Grid < 2.4.10 - Contributor+ Stored Cross-Site Scripting
Fixed in
Fixed in 2.4.10
CVSS
6.8 (medium)
Published
2021-08-17
Title
PostX Gutenberg Blocks for Post Grid < 2.4.10 - Missing Access Controls
Fixed in
Fixed in 2.4.10
CVSS
4.3 (medium)