622 matches found
CVE-2023-6645 Post Grid Combo – 36+ Gutenberg Blocks <= 2.2.64 - Authenticated (Contributor+) Cross-Site Scripting
The Post Grid Combo – 36+ Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the custom JS parameter in all versions up to, and including, 2.2.64 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, wit...
WordPress Plugin Post Grid Combo Security Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blog sites on PHP and MySQL servers.WordPress plugin is an...
PT-2024-15041 · WordPress · The Post Grid Combo – 36+ Gutenberg Blocks
Name of the Vulnerable Software and Affected Versions: The Post Grid Combo – 36+ Gutenberg Blocks plugin for WordPress versions up to, and including, 2.2.64 Description: The issue is related to Stored Cross-Site Scripting via the custom JS parameter due to insufficient input sanitization and outp...
WordPress Post Grid and Gutenberg Blocks Plugin <= 2.2.64 is vulnerable to Cross Site Scripting (XSS)
Software Post Grid and Gutenberg Blocks Type Plugin Vulnerable versions = 2.2.64 Fixed in 2.2.65 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-6645 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID d1fd7cc48237 Credits...
CVE-2023-40211
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in PickPlugins Post Grid Combo – 36+ Gutenberg Blocks.This issue affects Post Grid Combo – 36+ Gutenberg Blocks: from n/a through 2.2.50...
CVE-2023-40211
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in PickPlugins Post Grid Combo – 36+ Gutenberg Blocks.This issue affects Post Grid Combo – 36+ Gutenberg Blocks: from n/a through 2.2.50...
CVE-2023-40211
CVE-2023-40211 affects PickPlugins Post Grid Combo – 36+ Gutenberg Blocks (WordPress Post Grid) with versions up to 2.2.50. The vulnerability is an information exposure allowing unauthenticated access, as detailed in PatchStack and Nuclei templates (POST/REST paths likely expose sensitive data to...
CVE-2023-40211 WordPress Post Grid Plugin <= 2.2.50 is vulnerable to Sensitive Data Exposure
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in PickPlugins Post Grid Combo – 36+ Gutenberg Blocks.This issue affects Post Grid Combo – 36+ Gutenberg Blocks: from n/a through 2.2.50...
WordPress Plugin Post Grid Combo Information Disclosure Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an...
PT-2023-27329
Name of the Vulnerable Software and Affected Versions PickPlugins Post Grid Combo – 36+ Gutenberg Blocks versions through 2.2.50 Description The issue is related to the exposure of sensitive information to an unauthorized actor. This is a problem where sensitive data is made available to...
The Post Grid < 7.2.8 - Block CSS Update via CSRF
Description The plugin does not have CSRF check when updating its block CSS, which could allow attackers to make logged in admins perform such action via a CSRF attack...
CVE-2023-39923
Cross-Site Request Forgery CSRF vulnerability in RadiusTheme The Post Grid plugin = 7.2.7 versions...
CVE-2023-39923
Cross-Site Request Forgery CSRF vulnerability in RadiusTheme The Post Grid plugin = 7.2.7 versions...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in RadiusTheme The Post Grid plugin = 7.2.7 versions...
CVE-2023-39923
The CVE-2023-39923 entry concerns the WordPress plugin The Post Grid (RadiusTheme) with a CSRF vulnerability in versions
CVE-2023-39923 WordPress The Post Grid Plugin <= 7.2.7 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in RadiusTheme The Post Grid plugin = 7.2.7 versions...
CVE-2023-39923 WordPress The Post Grid Plugin <= 7.2.7 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in RadiusTheme The Post Grid plugin = 7.2.7 versions...
WordPress Plugin The Post Grid - Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid Cross-Site Request Forgery Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin The Post Grid - Shortcode,...
PT-2023-27157 · Radiustheme · The Post Grid
Name of the Vulnerable Software and Affected Versions: RadiusTheme The Post Grid plugin versions = 7.2.7 Description: A Cross-Site Request Forgery CSRF issue affects the RadiusTheme The Post Grid plugin. This allows an attacker to perform unintended actions on a user's behalf. Recommendations: Fo...