WordPress security by component
The Post Grid
Plugin description
The Post Grid is a WordPress component with 12 published CVE records in this archive. The latest tracked vulnerability was published May 27, 2026; the highest CVE/CNA score is 7.5.
Plugin slug:
the-post-gridLatest vulnerability
CVE-2026-49054: The Post Grid: A security weakness
The Post Grid is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is n/a through 7.9.2.
| Safe version |
|
||
|---|---|---|---|
| May 27, 2026 |
CVE-2026-49054
The Post Grid: A security weakness
The Post Grid is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is n/a through 7.9.2.
|
> 7.9.2 |
CVE4.3
NVDPending
|
| Mar 27, 2025 |
CVE-2025-30814
The Post Grid: Filesystem traversal
The Post Grid is affected by filesystem traversal. Exposure depends on how the affected operation is made reachable by the site. A crafted path can escape the intended directory and reach files or directories elsewhere on the server.
|
See mitigation notes |
CVE7.5
NVDPending
|
| Nov 01, 2024 |
CVE-2024-37483
The Post Grid: A security weakness
The Post Grid is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE5.4
NVDPending
|
| Nov 01, 2024 |
CVE-2024-37482
The Post Grid: A security weakness
The Post Grid is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE4.3
NVDPending
|
| Nov 01, 2024 |
CVE-2024-37481
The Post Grid: A security weakness
The Post Grid is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE6.5
NVDPending
|
| Sep 30, 2024 |
CVE-2024-3635
Post Grid: Cross-site scripting
Post Grid is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE4.8
NVD4.8
|
| Aug 29, 2024 |
CVE-2024-7418
The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid: Sensitive information exposure
The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid is affected by sensitive information exposure. Exploitation requires at least contributor-level access. Successful exploitation can disclose data that should not be available to the caller.
|
See mitigation notes |
CVE4.3
NVD4.3
|
| Jul 02, 2024 |
CVE-2024-1427
The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid: Cross-site scripting
The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid is affected by cross-site scripting. Exploitation requires an authenticated WordPress account. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE6.4
NVD5.4
|
| Jun 08, 2024 |
CVE-2024-35739
The Post Grid: Cross-site scripting
The Post Grid is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE6.5
NVD5.4
|
| May 02, 2024 |
CVE-2024-3936
The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid: A security weakness
The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid is affected by a security weakness. Exploitation requires an authenticated WordPress account. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE4.3
NVDPending
|
| Oct 03, 2023 |
CVE-2023-39923
The Post Grid: Cross-site request forgery
The Post Grid is affected by cross-site request forgery. Exposure depends on how the affected operation is made reachable by the site. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.
|
See mitigation notes |
CVE5.4
NVD8.8
|
| May 23, 2023 |
CVE-2022-46853
The Post Grid: Cross-site request forgery
The Post Grid is affected by cross-site request forgery. Exposure depends on how the affected operation is made reachable by the site. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.
|
See mitigation notes |
CVE4.3
NVD8.8
|