Pickplugins Post Grid vulnerabilities

• pickplugins post grid Post Grid and Gutenberg Blocks – ComboBlocks 2.2.85 - 2.3.32 - Unauthenticated Hook Injection CVE-2024-11080 9.8 CriticalSeptember 5, 2026
• pickplugins post grid and gutenberg blocks WordPress Post Grid and Gutenberg Blocks plugin <= 2.3.23 - Cross Site Scripting (XSS) vulnerability CVE-2025-68605 6.5 MediumDecember 24, 2025
• pickplugins post grid and gutenberg blocks WordPress Post Grid and Gutenberg Blocks plugin <= 2.3.23 - Insecure Direct Object References (IDOR) vulnerability CVE-2025-63043 5.3 MediumDecember 18, 2025
• pickplugins post grid and gutenberg blocks WordPress Post Grid and Gutenberg Blocks plugin <= 2.3.17 - Broken Access Control vulnerability CVE-2025-66058 6.5 MediumDecember 18, 2025
• pickplugins post grid and gutenberg blocks WordPress Post Grid and Gutenberg Blocks plugin <= 2.3.17 - Broken Access Control vulnerability CVE-2025-62924 6.5 MediumOctober 27, 2025
• pickplugins post grid and gutenberg blocks WordPress Post Grid and Gutenberg Blocks Plugin <= 2.3.11 - PHP Object Injection Vulnerability CVE-2025-54007 8.8 HighAugust 20, 2025
• pickplugins post grid Post Grid and Gutenberg Blocks – ComboBlocks <= 2.3.6 - Unauthenticated User Information Exposure CVE-2024-13796 5.3 MediumFebruary 28, 2025
• pickplugins comboblocks, post grid +1 more Post Grid and Gutenberg Blocks – ComboBlocks <= 2.3.5 - Unauthenticated Paid Order Creation CVE-2024-13798 5.3 MediumFebruary 22, 2025
• pickplugins post grid and gutenberg blocks – comboblocks Post Grid and Gutenberg Blocks 2.2.85 - 2.3.3 - Unauthenticated Privilege Escalation CVE-2024-9636 9.8 CriticalJanuary 15, 2025
• pickplugins post grid and gutenberg blocks WordPress Post Grid and Gutenberg Blocks plugin <= 2.2.93 - Cross Site Scripting (XSS) vulnerability CVE-2024-50432 6.5 MediumOctober 28, 2024
• pickplugins post grid Post Grid <= 2.1.12 - Contributor+ SQL Injection CVE-2021-4450 8.8 HighOctober 16, 2024
• pickplugins post grid and gutenberg blocks WordPress ComboBlocks plugin <= 2.2.89 - Cross Site Scripting (XSS) vulnerability CVE-2024-47340 6.5 MediumOctober 6, 2024
• pickplugins post grid and gutenberg blocks, post grid +1 more Post Grid and Gutenberg Blocks 2.2.87 - 2.2.90 - Authenticated (Subscriber+) Privilege Escalation CVE-2024-8253 8.8 HighSeptember 11, 2024
• pickplugins page builder comboblocks, post grid +1 more Gutenberg Blocks, Page Builder – ComboBlocks <= 2.2.87 - Authenticated (Contributor+) Stored Cross-Site Scripting via Accordion Block CVE-2024-7588 6.4 MediumAugust 14, 2024
• pickplugins comboblocks, post grid +1 more Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel – Combo Blocks <= 2.2.85 - Authenticated (Contributor+) Stored Cross-Site Scripting via redirectURL Parameter of Date… CVE-2024-6346 6.4 MediumAugust 1, 2024
• pickplugins post grid, comboblocks +1 more Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel - Combo Blocks <= 2.2.80 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block Attribute CVE-2024-4042 6.4 MediumJune 7, 2024
• pickplugins post grid Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel – Combo Blocks <= 2.2.80 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-1988 6.4 MediumJune 7, 2024
• pickplugins post grid, post grid combo +1 more Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel – Combo Blocks <= 2.2.80 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-3155 6.4 MediumMay 21, 2024
• pickplugins post grid WordPress Combo Blocks plugin <= 2.2.78 - Sensitive Data Exposure via API vulnerability CVE-2024-32816 7.5 HighApril 24, 2024
• pickplugins post grid WordPress Combo Blocks plugin <= 2.2.74 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2024-30441 7.1 HighMarch 29, 2024
• pickplugins post grid, post grid combo +1 more Post Grid Combo – 36+ Gutenberg Blocks <= 2.2.68 - Information Exposure via get_posts API Endpoint CVE-2023-7072 7.5 HighMarch 12, 2024
• pickplugins post grid, post grid combo +1 more Post Grid Combo – 36+ Gutenberg Blocks <= 2.2.64 - Authenticated (Contributor+) Cross-Site Scripting CVE-2023-6645 6.4 MediumJanuary 11, 2024
• pickplugins post grid combo – 36+ gutenberg blocks, post grid combo +1 more WordPress Post Grid Plugin <= 2.2.50 is vulnerable to Sensitive Data Exposure CVE-2023-40211 7.5 HighNovember 30, 2023
• pickplugins post grid Post Grid < 2.1.16 - Reflected Cross-Site Scripting via post_types CVE-2022-0447 6.4 MediumApril 11, 2022
• pickplugins post grid Post Grid < 2.1.16 - Reflected Cross-Site Scripting via keyword CVE-2021-24986 6.1 MediumApril 11, 2022
• pickplugins post grid Post Grid < 2.1.8 - Reflected Cross-Site Scripting (XSS) CVE-2021-24488 Public exploit EPSS 11.2% 6.1 MediumAugust 2, 2021