Medium
CVE-2026-94680
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 65
Reset filters
Medium
CVE-2026-94671
The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid <= 7.9.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-84151
The Post Grid <= 7.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2024-11080
Post Grid and Gutenberg Blocks – ComboBlocks 2.2.85 - 2.3.22 - Unauthenticated Hook Injection
Medium
CVE-2026-16260
Post Grid, Slider & Carousel Ultimate <= 1.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-49054
The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid <= 7.9.2 - Missing Authorization
Critical
CVE-2026-6443
Essentialplugin Plugins (Various Versions) - Injected Backdoor
Medium
CVE-2025-68605
Post Grid and Gutenberg Blocks <= 2.3.23 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-63043
Post Grid and Gutenberg Blocks <= 2.3.19 - Unauthenticated Insecure Direct Object Reference
Medium
CVE-2025-66058
Post Grid and Gutenberg Blocks <= 2.3.17 - Missing Authorization
Medium
CVE-2025-62924
Post Grid and Gutenberg Blocks <= 2.3.17 - Missing Authorization
High
CVE-2025-54007
Post Grid and Gutenberg Blocks <= 2.3.11 - Authenticated (Contributor+) PHP Object Injection
High
CVE-2025-30814
The Post Grid <= 7.7.17 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-13796
Post Grid and Gutenberg Blocks – ComboBlocks <= 2.3.6 - Unauthenticated User Information Exposure
Medium
CVE-2024-13798
Post Grid and Gutenberg Blocks – ComboBlocks <= 2.3.5 - Unauthenticated Paid Order Creation
High
CVE-2025-24782
Post Grid, Slider & Carousel Ultimate <= 1.6.10 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2024-13409
Post Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget <= 1.6.10 - Authenticated (Contributor+) Local File Inclusion via post_type_ajax_handler()
High
CVE-2024-13408
Post Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget <= 1.6.10 - Authenticated (Contributor+) Local File Inclusion
Critical
CVE-2024-9636
Post Grid and Gutenberg Blocks 2.2.85 - 2.3.3 - Unauthenticated Privilege Escalation
Medium
CVE-2024-9645
Post Grid and Gutenberg Blocks <= 2.2.92 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-56268
Post Grid Elementor Addon <= 2.0.18 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-51928
Blocks Post Grid <= 1.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-51852
Dynamic Post Grid Elementor Addon <= 1.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-50432
Post Grid and Gutenberg Blocks <= 2.2.93 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.