Post Grid and Gutenberg Blocks
PickPlugins
Developer
2.3.24
Latest version
30,000
Installations
No date
Last updated
Vulnerability history
1 present
29 patched
11 Mitigation rules
- WordPress Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel - Combo Blocks plugin <= 2.2.80 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability<= 2.2.8002/02/2026
- Authenticated (Contributor+) Stored Cross-Site Scripting via Block Attribute vulnerability<= 2.2.8002/02/2026
- Cross Site Scripting (XSS) vulnerability<= 2.3.2321/12/2025
- Insecure Direct Object References (IDOR) vulnerability<= 2.3.2403/12/2025
- Broken Access Control vulnerability<= 2.3.1704/10/2025
- Broken Access Control vulnerability<= 2.3.1704/10/2025
- PHP Object Injection Vulnerability<= 2.3.1106/08/2025
- Unauthenticated User Information Exposure vulnerability<= 2.3.627/02/2025
- Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability<= 2.2.9221/02/2025
- Unauthenticated Paid Order Creation vulnerability<= 2.3.521/02/2025
- Unauthenticated Privilege Escalation vulnerability2.2.85-2.3.314/01/2025
- Cross Site Scripting (XSS) vulnerability<= 2.2.9324/10/2024
- Cross Site Scripting (XSS) vulnerability<= 2.2.8927/09/2024
- Authenticated (Subscriber+) Privilege Escalation vulnerability<= 2.2.9010/09/2024
- Authenticated (Contributor+) Stored Cross-Site Scripting via Accordion Block vulnerability<= 2.2.8714/08/2024
- Cross Site Scripting (XSS) vulnerability<= 2.2.8607/08/2024
- Authenticated (Contributor+) Stored Cross-Site Scripting via redirectURL Parameter of Date Countdown Widget vulnerability<= 2.2.85a01/08/2024
- Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability<= 2.2.8021/05/2024
- Sensitive Data Exposure via API vulnerability<= 2.2.7822/04/2024
- Unauthenticated Password Protected Posts Access vulnerability< 2.2.7615/04/2024
- Reflected Cross Site Scripting (XSS) vulnerability<= 2.2.7428/03/2024
- Information Exposure via get_posts API Endpoint vulnerability<= 2.2.6812/03/2024
- Authenticated Cross-Site Scripting vulnerability<= 2.2.6415/12/2023
- Sensitive Data Exposure vulnerability<= 2.2.5011/08/2023
- Reflected Cross-Site Scripting (XSS) vulnerability<= 2.1.1515/03/2022
- Reflected Cross-Site Scripting (XSS) vulnerability<= 2.1.1515/03/2022
- PHP Object Injection vulnerability<= 2.0.7205/10/2020
- Authenticated Stored Cross-Site Scripting (XSS) vulnerability<= 2.0.7205/10/2020
- Arbitrary File Deletion<= 2.0.1208/11/2016
- File Deletion Vulnerability<= 2.0.1108/11/2016