Advisories · Technology
pickplugins Post Grid.
Every CVE that names pickplugins Post Grid among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.8 CriticalCritical · CVSS 9+
Post Grid and Gutenberg Blocks – ComboBlocks 2.2.85 - 2.3.32 - Unauthenticated Hook Injection
- pickplugins Post Grid
- Code injection
- CVSS 5.3 Medium
Post Grid and Gutenberg Blocks – ComboBlocks <= 2.3.6 - Unauthenticated User Information Exposure
- pickplugins Post Grid
- Information disclosure
- CVSS 5.3 Medium
Post Grid and Gutenberg Blocks – ComboBlocks <= 2.3.5 - Unauthenticated Paid Order Creation
- pickplugins Post Grid
- CWE-20
- CVSS 8.8 High
Post Grid <= 2.1.12 - Contributor+ SQL Injection
- pickplugins Post Grid
- SQL injection
- CVSS 6.4 Medium
Gutenberg Blocks, Page Builder – ComboBlocks <= 2.2.87 - Authenticated (Contributor+) Stored Cross-Site Scripting via Accordion Block
- pickplugins Post Grid
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel – Combo Blocks <= 2.2.85 - Authenticated (Contributor+) Stored Cross-Site Scripting via redirectURL Parameter of Dat…
- pickplugins Post Grid
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel - Combo Blocks <= 2.2.80 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block Attribute
- pickplugins Post Grid
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel – Combo Blocks <= 2.2.80 - Authenticated (Contributor+) Stored Cross-Site Scripting
- pickplugins Post Grid
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel – Combo Blocks <= 2.2.80 - Authenticated (Contributor+) Stored Cross-Site Scripting
- pickplugins Post Grid
- Cross-site scripting (XSS)
- CVSS 7.5 High
WordPress Combo Blocks plugin <= 2.2.78 - Sensitive Data Exposure via API vulnerability
- PickPlugins Post Grid
- Information disclosure
- CVSS 7.1 High
WordPress Combo Blocks plugin <= 2.2.74 - Reflected Cross Site Scripting (XSS) vulnerability
- PickPlugins Post Grid
- Cross-site scripting (XSS)
- CVSS 7.5 High
Post Grid Combo – 36+ Gutenberg Blocks <= 2.2.68 - Information Exposure via get_posts API Endpoint
- pickplugins Post Grid
- CWE-202
- CVSS 6.4 Medium
Post Grid Combo – 36+ Gutenberg Blocks <= 2.2.64 - Authenticated (Contributor+) Cross-Site Scripting
- pickplugins Post Grid
- Cross-site scripting (XSS)