What’s Vulnerable › Products

pickplugins Post Grid vulnerabilities

24 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 10 published in the last 12 months.

Check whether your pickplugins Post Grid version is affected

Latest pickplugins Post Grid vulnerabilities

• CVE-2024-11080 — Post Grid and Gutenberg Blocks – ComboBlocks 2.2.85 - 2.3.32 - Unauthenticated Hook Injection (CVSS 9.8)
• CVE-2025-68605 — WordPress Post Grid and Gutenberg Blocks plugin <= 2.3.23 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
• CVE-2025-66058 — WordPress Post Grid and Gutenberg Blocks plugin <= 2.3.17 - Broken Access Control vulnerability (CVSS 6.5)
• CVE-2025-63043 — WordPress Post Grid and Gutenberg Blocks plugin <= 2.3.23 - Insecure Direct Object References (IDOR) vulnerability (CVSS 5.3)
• CVE-2025-62924 — WordPress Post Grid and Gutenberg Blocks plugin <= 2.3.17 - Broken Access Control vulnerability (CVSS 6.5)
• CVE-2025-54007 — WordPress Post Grid and Gutenberg Blocks Plugin <= 2.3.11 - PHP Object Injection Vulnerability (CVSS 8.8)
• CVE-2024-9645 — Post Grid and Gutenberg Blocks < 2.2.93 - Contributor+ Stored XSS (CVSS 5.4)
• CVE-2024-13796 — Post Grid and Gutenberg Blocks – ComboBlocks <= 2.3.6 - Unauthenticated User Information Exposure (CVSS 7.5)
• CVE-2024-13408 — Post Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget <= 1.6.10 - Authenticated (Contributor+) Local File Inclusion (CVSS 8.8)
• CVE-2024-50432 — WordPress Post Grid and Gutenberg Blocks plugin <= 2.2.93 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
• CVE-2021-4450 — Post Grid <= 2.1.12 - Contributor+ SQL Injection (CVSS 8.8)
• CVE-2024-47340 — WordPress ComboBlocks plugin <= 2.2.89 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
• CVE-2024-8253 — Post Grid and Gutenberg Blocks 2.2.87 - 2.2.90 - Authenticated (Subscriber+) Privilege Escalation (CVSS 8.8)
• CVE-2024-1988 — Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel – Combo Blocks <= 2.2.80 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 5.4)
• CVE-2024-32816 — WordPress Combo Blocks plugin <= 2.2.78 - Sensitive Data Exposure via API vulnerability (CVSS 7.5)
• CVE-2024-0881 — Combo Blocks < 2.2.76 - Unauthenticated Password Protected Posts Access (CVSS 5.4)
• CVE-2024-30441 — WordPress Combo Blocks plugin <= 2.2.74 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
• CVE-2022-0447 — Post Grid < 2.1.16 - Reflected Cross-Site Scripting via post_types (CVSS 6.4)
• CVE-2021-24986 — Post Grid < 2.1.16 - Reflected Cross-Site Scripting via keyword (CVSS 6.1)
• CVE-2021-24488 — Post Grid < 2.1.8 - Reflected Cross-Site Scripting (XSS) (CVSS 6.1)
• CVE-2020-35939 — (CVSS 8.8)
• CVE-2020-35938 — (CVSS 8.8)
• CVE-2020-35937 — (CVSS 8.0)
• CVE-2020-35936 — (CVSS 8.0)