RadiusTheme The Post Grid vulnerabilities

13 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Latest RadiusTheme The Post Grid vulnerabilities

CVE-2026-84151 — The Post Grid < 7.9.5 - Contributor+ Stored HTML/iframe Injection via wp_kses_post Allow-List Widening (CVSS 3.5)
CVE-2026-94680 — WordPress The Post Grid plugin <= 7.9.5 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
CVE-2026-94671 — WordPress The Post Grid plugin <= 7.9.5 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
CVE-2025-30814 — WordPress The Post Grid plugin <= 7.7.17 - Local File Inclusion vulnerability (CVSS 7.5)
CVE-2024-37483 — WordPress The Post Grid plugin <= 7.7.4 - Broken Access Control vulnerability (CVSS 5.4)
CVE-2024-37482 — WordPress The Post Grid plugin <= 7.7.4 - Broken Access Control vulnerability (CVSS 4.3)
CVE-2024-37481 — WordPress The Post Grid plugin <= 7.7.4 - Broken Access Control vulnerability (CVSS 6.5)
CVE-2024-3635 — The Post Grid < 7.5.0 - Editor+ Stored XSS via Grid Creation (CVSS 4.8)
CVE-2024-7418 — The Post Grid <= 7.7.11 - Authenticated (Contributor+) Information Disclosure (CVSS 4.3)
CVE-2024-1427 — The Post Grid <= 7.7.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via section title tag (CVSS 5.4)
CVE-2024-35739 — WordPress The Post Grid plugin <= 7.7.1 - Cross Site Scripting (XSS) vulnerability (CVSS 5.4)
CVE-2023-39923 — WordPress The Post Grid Plugin <= 7.2.7 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 8.8)
CVE-2022-46853 — WordPress The Post Grid Plugin <= 5.0.4 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 8.8)