WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
post-featured-video
Published
2025-09-26
Title
Post Featured Video <= 1.7 - Cross-Site Request Forgery
Slug
post-flagger
Published
2026-03-20
Title
Post Flagger <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'slug' Shortcode Attribute
Slug
post-from-frontend
Published
2024-10-15
Title
Post From Frontend <= 1.0.0 - Post Deletion via CSRF
Slug
post-gallery
Published
2014-08-01
Title
Post Gallery - Cross-Site Scripting (XSS)
Slug
post-grid
Published
2016-11-08
Title
Post Grid <= 2.0.12 - Unauthenticated Arbitrary File Deletion
Slug
post-grid
Published
2020-10-05
Title
Post Grid < 2.0.73 & Team Showcase < 1.22.16 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
post-grid
Published
2020-10-05
Title
Post Grid < 2.0.73 & Team Showcase < 1.22.16 - PHP Object Injection
Slug
post-grid
Published
2021-06-28
Title
Post Grid < 2.1.8 - Reflected Cross-Site Scripting (XSS)
Slug
post-grid
Published
2021-12-15
Title
Post Grid < 2.1.13 - Contributor+ SQL Injection
Slug
post-grid
Published
2022-03-15
Title
Post Grid < 2.1.16 - Reflected Cross-Site Scripting via keyword
Slug
post-grid
Published
2022-03-15
Title
Post Grid < 2.1.16 - Reflected Cross-Site Scripting via post_types
Slug
post-grid
Published
2023-12-15
Title
Post Grid Combo – 36+ Gutenberg Blocks < 2.2.65 - Authenticated (Contributor+) Cross-Site Scripting
Slug
post-grid
Published
2024-03-12
Title
Post Grid Combo – 36+ Gutenberg Blocks < 2.2.69 - Information Exposure via get_posts API Endpoint
Slug
post-grid
Published
2024-03-19
Title
Combo Blocks < 2.2.76 - Unauthenticated Password Protected Posts Access
Slug
post-grid
Published
2024-03-28
Title
Post Grid < 2.2.76 - Reflected Cross-Site Scripting
Slug
post-grid
Published
2024-04-22
Title
Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel – Combo Blocks < 2.2.79 - Unauthenticated Sensitive Information Exposure
Slug
post-grid
Published
2024-05-20
Title
Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel – Combo Blocks < 2.2.81 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
post-grid
Published
2024-06-06
Title
Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel – Combo Blocks < 2.2.81 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
post-grid
Published
2024-06-06
Title
Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel - Combo Blocks < 2.2.81 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block Attribute
Slug
post-grid
Published
2024-07-31
Title
Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel – Combo Blocks < 2.2.86 - Authenticated (Contributor+) Stored Cross-Site Scripting via redirectURL Parameter of Date Countdown Widget
Slug
post-grid
Published
2024-08-13
Title
Gutenberg Blocks, Page Builder – ComboBlocks < 2.2.88 - Authenticated (Contributor+) Stored Cross-Site Scripting via Accordion Block
Slug
post-grid
Published
2024-08-07
Title
ComboBlocks < 2.2.87 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
post-grid
Published
2024-09-10
Title
Post Grid and Gutenberg Blocks 2.2.87 - 2.2.90 - Subscriber+ Privilege Escalation
Slug
post-grid
Published
2024-09-27
Title
Post Grid and Gutenberg Blocks < 2.2.90 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
post-grid
Published
2024-10-24
Title
Post Grid and Gutenberg Blocks < 2.2.94 - Authenticated (Contributor+) Stored Cross-Site Scripting