The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid Security: 21 Known Vulnerabilities

CVE-2025-14283 UNKNOWN EPSS 0.1%

Published 2026-01-28 · Affected: *

The BlockArt Blocks – Gutenberg Blocks, Page Builder Blocks ,WordPress Block Plugin, Sections & Template Library plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the BlockArt Coun

CVE-2025-12449 UNKNOWN EPSS 0.1%

Published 2026-01-07 · Affected: *

The aBlocks – WordPress Gutenberg Blocks plugin for WordPress is vulnerable to unauthorized modification of data and disclosure of sensitive information due to missing capability checks on multiple AJ

CVE-2025-11770 UNKNOWN EPSS 0.1%

Published 2025-11-21 · Affected: *

The BrightTALK WordPress Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'format' shortcode attribute in the brighttalk-time shortcode in all versions up to, and in

CVE-2025-8566 UNKNOWN EPSS 0.1%

Published 2025-09-30 · Affected: *

The GutenBee – Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via parameters in the CountUp and Google Maps Blocks in all versions up to, and including, 2.18.0 due

CVE-2024-4780 UNKNOWN EPSS 0.4%

Published 2024-07-16 · Affected: *

The Image Hover Effects – Elementor Addon plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘eihe_link’ parameter in all versions up to, and including, 1.4.3 due to insufficien

CVE-2024-1427 UNKNOWN EPSS 0.3%

Published 2024-07-02 · Affected: *

The The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the section title tag attribute in all versions

CVE-2024-1427 UNKNOWN EPSS 0.3%

Published 2024-07-02 · Affected: *

The The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the section title tag attribute in all versions

CVE-2023-6692 UNKNOWN EPSS 0.2%

Published 2024-06-19 · Affected: *

The Ultimate Blocks – WordPress Blocks Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's tab anchor metabox in all versions up to, and including, 3.0.8 due to i

CVE-2024-35739 UNKNOWN EPSS 0.2%

Published 2024-06-08 · Affected: *

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RadiusTheme The Post Grid the-post-grid.This issue affects The Post Grid: from n/a through <= 7.7.

CVE-2024-35739 UNKNOWN EPSS 0.2%

Published 2024-06-08 · Affected: *

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RadiusTheme The Post Grid the-post-grid.This issue affects The Post Grid: from n/a through <= 7.7.

CVE-2024-35739 UNKNOWN EPSS 0.2%

Published 2024-06-08 · Affected: *

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RadiusTheme The Post Grid the-post-grid.This issue affects The Post Grid: from n/a through <= 7.7.

CVE-2024-35739 UNKNOWN EPSS 0.2%

Published 2024-06-08 · Affected: *

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RadiusTheme The Post Grid the-post-grid.This issue affects The Post Grid: from n/a through <= 7.7.

CVE-2024-4366 UNKNOWN EPSS 0.2%

Published 2024-05-24 · Affected: *

The Spectra – WordPress Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘block_id’ parameter in versions up to, and including, 2.13.0 due to insufficient inp

CVE-2024-1815 UNKNOWN EPSS 0.2%

Published 2024-05-23 · Affected: *

The Spectra – WordPress Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Image Gallery block in all versions up to, and including, 2.12.8 due to insu

CVE-2024-1814 UNKNOWN EPSS 0.2%

Published 2024-05-23 · Affected: *

The Spectra – WordPress Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Testimonial block in all versions up to, and including, 2.12.8 due to insuff

CVE-2024-1166 UNKNOWN EPSS 0.2%

Published 2024-05-14 · Affected: *

The Image Hover Effects – Elementor Addon plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Image Hover Effects Widget in all versions up to, and including, 1.4.1 due

CVE-2024-3936 UNKNOWN EPSS 0.4%

Published 2024-05-02 · Affected: *

The The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the rtTPG

CVE-2024-3107 UNKNOWN EPSS 0.5%

Published 2024-05-02 · Affected: *

The Spectra – WordPress Gutenberg Blocks plugin for WordPress is vulnerable to Path Traversal in versions up to, and including, 2.12.6 via the get_block_default_attributes function. This allows authen

CVE-2023-6486 UNKNOWN EPSS 0.4%

Published 2024-04-09 · Affected: *

The Spectra – WordPress Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Custom CSS metabox in all versions up to and including 2.10.3 due to insufficient inp

CVE-2023-7072 UNKNOWN EPSS 0.5%

Published 2024-03-12 · Affected: *

The Post Grid Combo – 36+ Gutenberg Blocks plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.2.68 via the 'get_posts' REST API Endpoint. This

CVE-2023-6645 UNKNOWN EPSS 0.3%

Published 2024-01-11 · Affected: *

The Post Grid Combo – 36+ Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the custom JS parameter in all versions up to, and including, 2.2.64 due to insufficien

The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid

Is The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid running on your site?