Product by PickPlugins

    Post Grid

    24 known vulnerabilities in Post Grid (PickPlugins), 0 of them actively exploited (CISA KEV).

    Key figures

    24

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Post Grid (PickPlugins)
    HighCVE-2024-8253

    Post Grid and Gutenberg Blocks 2.2.87 - 2.2.90 - Authenticated (Subscriber+) Privilege Escalation

    also in 1 other product

    		8.8
    MediumCVE-2024-0881

    Combo Blocks < 2.2.76 - Unauthenticated Password Protected Posts Access

    		5.4
    MediumCVE-2021-24488

    Post Grid < 2.1.8 - Reflected Cross-Site Scripting (XSS)

    		6.1
    CriticalCVE-2024-11080

    Post Grid and Gutenberg Blocks – ComboBlocks 2.2.85 - 2.3.32 - Unauthenticated Hook Injection

    		9.8
    HighCVE-2020-35939

    PickPlugins Team Showcase: security vulnerability

    also in 1 other product

    		7.5
    HighCVE-2020-35938

    Post Grid: security vulnerability

    also in 1 other product

    		7.5
    HighCVE-2020-35937

    PickPlugins Team Showcase: Cross-Site Scripting (XSS)

    also in 1 other product

    		7.5
    HighCVE-2020-35936

    Post Grid: Cross-Site Scripting (XSS)

    also in 1 other product

    		7.5
    HighCVE-2021-4450

    Post Grid <= 2.1.12 - Contributor+ SQL Injection

    		8.8
    HighCVE-2024-32816

    WordPress Combo Blocks plugin <= 2.2.78 - Sensitive Data Exposure via API vulnerability

    		7.5
    HighCVE-2024-13408

    Post Grid: PHP Remote File Inclusion

    also in 1 other product

    		7.5
    HighCVE-2023-7072

    Post Grid Combo – 36+ Gutenberg Blocks <= 2.2.68 - Information Exposure via get_posts API Endpoint

    also in 1 other product

    		7.5
    MediumCVE-2021-24986

    Post Grid < 2.1.16 - Reflected Cross-Site Scripting via keyword

    		6.1
    MediumCVE-2022-0447

    Post Grid < 2.1.16 - Reflected Cross-Site Scripting via post_types

    		6.4
    HighCVE-2024-30441

    WordPress Combo Blocks plugin <= 2.2.74 - Reflected Cross Site Scripting (XSS) vulnerability

    		7.1
    HighCVE-2024-13796

    Post Grid and Gutenberg Blocks – ComboBlocks <= 2.3.6 - Unauthenticated User Information Exposure

    		5.3
    MediumCVE-2024-7588

    PickPlugins Post Grid: Cross-site Scripting

    		6.4
    MediumCVE-2024-6346

    PickPlugins Post Grid: Cross-site Scripting

    also in 1 other product

    		6.4
    MediumCVE-2023-6645

    Post Grid Combo – 36+ Gutenberg Blocks <= 2.2.64 - Authenticated (Contributor+) Cross-Site Scripting

    also in 1 other product

    		6.4
    MediumCVE-2024-9645

    Post Grid and Gutenberg Blocks < 2.2.93 - Contributor+ Stored XSS

    		5.4
    MediumCVE-2024-3155

    PickPlugins Post Grid: Cross-site Scripting

    		6.4
    MediumCVE-2024-13798

    Post Grid and Gutenberg Blocks – ComboBlocks <= 2.3.5 - Unauthenticated Paid Order Creation

    also in 1 other product

    		5.3
    MediumCVE-2024-4042

    PickPlugins Post Grid: Cross-site Scripting

    also in 1 other product

    		6.4
    MediumCVE-2024-1988

    PickPlugins Post Grid: Cross-site Scripting

    		6.4

    All products by PickPlugins