Advisories · Technology

shapedplugin Smart Post – Post Grid, Post Carousel, Post Slider Gutenberg Blocks for Blog & News.

Every CVE that names shapedplugin Smart Post – Post Grid, Post Carousel, Post Slider Gutenberg Blocks for Blog & News among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-119160 CVE record

CVSS 6.4 Medium

Smart Post <= 4.0.9 - Authenticated (Subscriber+) Stored Cross-Site Scripting via User display_name via Author Filter block
- shapedplugin Smart Post – Post Grid, Post Carousel, Post Slider Gutenberg Blocks for Blog & News
- Cross-site scripting (XSS)
Not analysed yet 31 Oct 2026