WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
post-grid
Published
2024-09-09
Title
Post Grid and Gutenberg Blocks < 2.2.93 - Contributor+ Stored XSS
Slug
post-grid
Published
2025-01-14
Title
Post Grid and Gutenberg Blocks 2.2.85 - 2.3.3 - Unauthenticated Privilege Escalation
Slug
post-grid
Published
2025-02-21
Title
Post Grid and Gutenberg Blocks < 2.3.6 - Unauthenticated Paid Order Creation
Slug
post-grid
Published
2025-02-27
Title
Post Grid and Gutenberg Blocks – ComboBlocks < 2.3.7 - Unauthenticated User Information Exposure
Slug
post-grid
Published
2025-08-06
Title
Post Grid and Gutenberg Blocks < 2.3.12 - Authenticated (Contributor+) PHP Object Injection
Slug
post-grid
Published
2025-10-04
Title
Post Grid and Gutenberg Blocks < 2.3.18 - Missing Authorization
Slug
post-grid
Published
2025-12-03
Title
Post Grid and Gutenberg Blocks <= 2.3.19 - Unauthenticated Insecure Direct Object Reference
Slug
post-grid
Published
2025-10-04
Title
Post Grid and Gutenberg Blocks < 2.3.18 - Missing Authorization
Slug
post-grid
Published
2025-12-21
Title
Post Grid and Gutenberg Blocks < 2.3.24 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
post-grid
Published
2026-09-04
Title
Post Grid and Gutenberg Blocks – ComboBlocks 2.2.85 - 2.3.22 - Unauthenticated Hook Injection
Slug
post-grid-and-filter-ultimate
Published
2026-04-13
Title
Multiple Plugins by "Essential Plugin" - Backdoor
Slug
post-grid-carousel-ultimate
Published
2022-05-26
Title
Post Grid, Slider & Carousel Ultimate < 1.5.0 - Admin+ Stored XSS
Slug
post-grid-carousel-ultimate
Published
2024-03-05
Title
Post Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget < 1.6.8 - Authenticated (Contributor+) PHP Object Injection in outpost_shortcode_metabox_markup
Slug
post-grid-carousel-ultimate
Published
2024-03-25
Title
Post Grid, Slider & Carousel Ultimate < 1.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
post-grid-carousel-ultimate
Published
2025-01-23
Title
Post Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget < 1.7 - Authenticated (Contributor+) Local File Inclusion via post_type_ajax_handler()
Slug
post-grid-carousel-ultimate
Published
2025-01-23
Title
Post Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget < 1.7 - Authenticated (Contributor+) Local File Inclusion
Slug
post-grid-carousel-ultimate
Published
2025-01-27
Title
Post Grid, Slider & Carousel Ultimate < 1.7 - Authenticated (Contributor+) Local File Inclusion
Slug
post-grid-carousel-ultimate
Published
2026-08-20
Title
Post Grid, Slider & Carousel Ultimate < 1.8.1 - Contributor+ Stored XSS via Header Title Field
Slug
post-grid-elementor-addon
Published
2024-05-17
Title
Post Grid Elementor Addon < 2.0.17 - Authenticated (Contributor+) Stored Cross-Site Scripting via title_tag
Slug
post-grid-elementor-addon
Published
2024-12-30
Title
Post Grid Elementor Addon < 2.0.19 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
post-grid-for-elementor
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
post-highlights
Published
2014-08-01
Title
post highlights <= 2.2 - SQL Injection
Slug
post-highlights
Published
2014-11-03
Title
Post highlights 2.0-2.6 - Stored Cross-Site Scripting (XSS)
Slug
post-ideas
Published
2024-11-18
Title
Post Ideas <= 2 - Unauthenticated SQL Injection
Slug
post-in-page-for-elementor
Published
2025-04-22
Title
Post in page for Elementor < 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting