Vendor
PickPlugins
90 known vulnerabilities in products by PickPlugins, 0 of them actively exploited (CISA KEV).
Key figures
90
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
6
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2024-8253 | Post Grid and Gutenberg Blocks 2.2.87 - 2.2.90 - Authenticated (Subscriber+) Privilege Escalation | 8.8 | |
| Medium | CVE-2024-0881 | Combo Blocks < 2.2.76 - Unauthenticated Password Protected Posts Access | 5.4 | |
| Medium | CVE-2021-24488 | Post Grid < 2.1.8 - Reflected Cross-Site Scripting (XSS) | 6.1 | |
| Medium | CVE-2021-24300 | PickPlugins Product Slider for WooCommerce < 1.13.22 - Reflected Cross-Site Scripting (XSS) | 6.1 | |
| Critical | CVE-2024-11080 | Post Grid and Gutenberg Blocks – ComboBlocks 2.2.85 - 2.3.32 - Unauthenticated Hook Injection | 9.8 | |
| Critical | CVE-2022-4693 | User Verification < 1.0.94 - Authentication Bypass | 9.8 | |
| High | CVE-2023-40211 | WordPress Post Grid Plugin <= 2.2.50 is vulnerable to Sensitive Data Exposure | 7.5 | |
| High | CVE-2020-35939 | PickPlugins Team Showcase: security vulnerability | 7.5 | |
| High | CVE-2020-35938 | Post Grid: security vulnerability | 7.5 | |
| High | CVE-2025-32144 | WordPress Job Board Manager Plugin <= 2.1.61 - PHP Object Injection vulnerability | 8.8 | |
| High | CVE-2025-32143 | WordPress Accordion plugin <= 2.3.11 - PHP Object Injection vulnerability | 8.8 | |
| High | CVE-2020-35937 | PickPlugins Team Showcase: Cross-Site Scripting (XSS) | 7.5 | |
| High | CVE-2020-35936 | Post Grid: Cross-Site Scripting (XSS) | 7.5 | |
| Critical | CVE-2026-7458 | PickPlugins User Verification by PickPlugins: Authentication Bypass Using an Alternate Path or Channel | 9.8 | |
| Critical | CVE-2024-9636 | Post Grid and Gutenberg Blocks 2.2.85 - 2.3.3 - Unauthenticated Privilege Escalation | 9.8 | |
| Critical | CVE-2024-54273 | WordPress Mail Picker plugin <= 1.0.14 - PHP Object Injection vulnerability | 9.8 | |
| Critical | CVE-2025-12374 | PickPlugins User Verification by PickPlugins: Improper Authentication | 9.8 | |
| High | CVE-2026-10207 | PickPlugins Question Answer <= 1.2.73 - Unauthenticated SQL Injection via 'id' Parameter | 7.5 | |
| High | CVE-2026-116392 | WordPress Accordion plugin <= 2.3.25 - PHP Object Injection vulnerability | 7.2 | |
| High | CVE-2025-54007 | WordPress Post Grid and Gutenberg Blocks Plugin <= 2.3.11 - PHP Object Injection Vulnerability | 8.8 | |
| High | CVE-2025-32647 | WordPress Question Answer plugin <= 1.2.73 - PHP Object Injection vulnerability | 8.8 | |
| High | CVE-2025-30889 | WordPress Testimonial Slider plugin <= 2.0.13 - PHP Object Injection vulnerability | 8.8 | |
| High | CVE-2025-32618 | WordPress Wishlist plugin <= 1.0.46 - SQL Injection vulnerability | 8.5 | |
| High | CVE-2021-4450 | Post Grid <= 2.1.12 - Contributor+ SQL Injection | 8.8 | |
| High | CVE-2024-32816 | WordPress Combo Blocks plugin <= 2.2.78 - Sensitive Data Exposure via API vulnerability | 7.5 |