PT-2023-15078

Name of the Vulnerable Software and Affected Versions RadiusTheme The Post Grid plugin versions = 5.0.4 Description The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web...

CVE-2022-46853: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in RadiusTheme The Post Grid plugin = 5.0.4 versions...

CVE-2023-0097: Improper Neutralization of Input During Web Page Generation

The Post Grid, Post Carousel, & List Category Posts WordPress plugin before 2.4.19 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site...

CVE-2022-1266: Improper Neutralization of Input During Web Page Generation

The Post Grid, Slider & Carousel Ultimate WordPress plugin before 1.5.0 does not sanitise and escape the Header Title, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...