Lucene search
K

12 matches found

CNNVD
CNNVD
added 2026/04/16 12:0 a.m.7 views

WordPress plugin Post Grid Gutenberg Blocks for News, Magazines, Blog Websites – PostX 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that extends the...

5.3CVSS5.8AI score0.00283EPSS
Exploits0References1
CVE
CVE
added 2026/03/04 1:21 a.m.15 views

CVE-2026-1273

CVE-2026-1273 concerns the WordPress PostX plugin (Post Grid Gutenberg Blocks for News, Magazines, Blog Websites) where SSRF is possible via REST endpoints /ultp/v3/starter_dummy_post/ and /ultp/v3/starter_import_content/. Wordfence reports that authenticated attackers with Administrator-level ac...

7.2CVSS6AI score0.00313EPSS
Exploits0References6
CNNVD
CNNVD
added 2026/01/22 12:0 a.m.4 views

WordPress plugin PostX has a security vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is...

7.5CVSS5.8AI score0.00287EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/12/18 12:0 a.m.2 views

WordPress plugin PostX 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

7.1CVSS6.6AI score0.00211EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2024-52150

Malicious code in bioql PyPI...

6.5CVSS8.7AI score0.00333EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 8:32 a.m.3 views

CVE-2024-50513

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPXPO PostX ultimate-post allows Stored XSS.This issue affects PostX: from n/a through = 4.1.15...

5.9CVSS5.9AI score0.00377EPSS
Exploits0References1
NVD
NVD
added 2024/12/09 1:15 p.m.17 views

CVE-2024-53818

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPXPO PostX ultimate-post.This issue affects PostX: from n/a through = 4.1.15...

6.5CVSS0.00333EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/12/09 12:54 p.m.11 views

CVE-2024-53818 WordPress PostX plugin <= 4.1.15 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPXPO PostX ultimate-post.This issue affects PostX: from n/a through = 4.1.15...

6.5CVSS8.6AI score0.00333EPSS
Exploits0References1
CVE
CVE
added 2024/12/09 12:54 p.m.53 views

CVE-2024-53818

PostX (Post Grid) WordPress plugin

6.5CVSS7.2AI score0.00333EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/11/19 12:0 a.m.3 views

PT-2024-34289 · Postx · Postx

Name of the Vulnerable Software and Affected Versions: PostX versions n/a through 4.1.15 Description: The issue is related to improper neutralization of input during web page generation, which allows for Stored XSS. This means that an attacker can inject malicious scripts into the website,...

5.9CVSS6.6AI score0.00377EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2024/10/28 12:0 a.m.2 views

PT-2024-34219 · Postx · Postx

Name of the Vulnerable Software and Affected Versions: PostX versions prior to 4.1.13 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks. Recommendations: For versions prior t...

6.5CVSS5.3AI score0.00254EPSS
Exploits0References5
Cvelist
Cvelist
added 2024/05/13 6:0 a.m.20 views

CVE-2024-3239 PostX < 4.0.2 - Contributor+ Stored XSS

The Post Grid Gutenberg Blocks and WordPress Blog Plugin WordPress plugin before 4.0.2 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Si...

5.7AI score0.00416EPSS
Exploits2References1
Rows per page
Query Builder