Pickplugins Post Grid vulnerabilities

• pickplugins post grid, unknown post grid, posts slider, posts carousel, post filter, post masonry +1 more Post Grid and Gutenberg Blocks < 2.2.93 - Contributor+ Stored XSS CVE-2024-9645 5.4 MediumMay 15, 2025
• pickplugins post grid Post Grid and Gutenberg Blocks – ComboBlocks <= 2.3.6 - Unauthenticated User Information Exposure CVE-2024-13796 5.3 MediumFebruary 28, 2025
• pickplugins post grid, wpwax post grid, slider & carousel ultimate – with shortcode, gutenberg block & elementor widget +1 more Post Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget <= 1.6.10 - Authenticated (Contributor+) Local File Inclusion CVE-2024-13408 7.5 HighJanuary 24, 2025
• pickplugins post grid combo, related posts by pickplugins +1 more Related Posts, Inline Related Posts, Contextual Related Posts, Related Content By PickPlugins <= 2.0.58 - Sensitive Information Exposure CVE-2024-10937 5.3 MediumDecember 5, 2024
• pickplugins post grid Post Grid <= 2.1.12 - Contributor+ SQL Injection CVE-2021-4450 8.8 HighOctober 16, 2024
• pickplugins post grid and gutenberg blocks, post grid +1 more Post Grid and Gutenberg Blocks 2.2.87 - 2.2.90 - Authenticated (Subscriber+) Privilege Escalation CVE-2024-8253 8.8 HighSeptember 11, 2024
• pickplugins post grid Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel – Combo Blocks <= 2.2.80 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-1988 6.4 MediumJune 7, 2024
• pickplugins post grid, post grid combo +1 more Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel – Combo Blocks <= 2.2.80 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-3155 6.4 MediumMay 21, 2024
• pickplugins post grid WordPress Combo Blocks plugin <= 2.2.78 - Sensitive Data Exposure via API vulnerability CVE-2024-32816 7.5 HighApril 24, 2024
• pickplugins post grid, unknown post grid, form maker, popup maker, woocommerce blocks, post blocks, post carousel +1 more Combo Blocks < 2.2.76 - Unauthenticated Password Protected Posts Access CVE-2024-0881 EPSS 16.9% 5.4 MediumApril 11, 2024
• pickplugins post grid, post grid combo +1 more Post Grid Combo – 36+ Gutenberg Blocks <= 2.2.68 - Information Exposure via get_posts API Endpoint CVE-2023-7072 7.5 HighMarch 12, 2024
• pickplugins post grid, post grid combo +1 more Post Grid Combo – 36+ Gutenberg Blocks <= 2.2.64 - Authenticated (Contributor+) Cross-Site Scripting CVE-2023-6645 6.4 MediumJanuary 11, 2024
• pickplugins post grid combo – 36+ gutenberg blocks, post grid combo +1 more WordPress Post Grid Plugin <= 2.2.50 is vulnerable to Sensitive Data Exposure CVE-2023-40211 7.5 HighNovember 30, 2023
• pickplugins post grid Post Grid < 2.1.16 - Reflected Cross-Site Scripting via post_types CVE-2022-0447 6.4 MediumApril 11, 2022
• pickplugins post grid Post Grid < 2.1.16 - Reflected Cross-Site Scripting via keyword CVE-2021-24986 6.1 MediumApril 11, 2022
• pickplugins post grid Post Grid < 2.1.8 - Reflected Cross-Site Scripting (XSS) CVE-2021-24488 Public exploit EPSS 11.2% 6.1 MediumAugust 2, 2021
• pickplugins team showcase, post grid +1 more PHP Object injection vulnerabilities in the Team Showcase plugin before 1.22.16 for WordPress... CVE-2020-35939 7.5 HighJanuary 1, 2021
• pickplugins post grid, team showcase +1 more PHP Object injection vulnerabilities in the Post Grid plugin before 2.0.73 for WordPress allow... CVE-2020-35938 7.5 HighJanuary 1, 2021
• pickplugins team showcase, post grid +1 more Stored Cross-Site Scripting (XSS) vulnerabilities in the Team Showcase plugin before 1.22.16 for... CVE-2020-35937 7.5 HighJanuary 1, 2021
• pickplugins post grid, team showcase +1 more Stored Cross-Site Scripting (XSS) vulnerabilities in the Post Grid plugin before 2.0.73 for... CVE-2020-35936 7.5 HighJanuary 1, 2021