pickplugins Post Grid vulnerabilities

CVEs per yearBy the year they were published

1. 202410
2. 20252
3. 20261

Newest CVEs

• CVE-2024-11080

  Post Grid and Gutenberg Blocks – ComboBlocks 2.2.85 - 2.3.32 - Unauthenticated Hook Injection

  pickplugins · Post Grid

  Critical9.8
• CVE-2024-13796

  Post Grid and Gutenberg Blocks – ComboBlocks <= 2.3.6 - Unauthenticated User Information Exposure

  pickplugins · Post Grid

  Medium5.3
• CVE-2024-13798

  Post Grid and Gutenberg Blocks – ComboBlocks <= 2.3.5 - Unauthenticated Paid Order Creation

  pickplugins · Post Grid

  Medium5.3
• CVE-2021-4450

  Post Grid <= 2.1.12 - Contributor+ SQL Injection

  pickplugins · Post Grid

  High8.8
• CVE-2024-7588

  Gutenberg Blocks, Page Builder – ComboBlocks <= 2.2.87 - Authenticated (Contributor+) Stored Cross-Site Scripting via Accordion Block

  pickplugins · Post Grid

  Medium6.4
• CVE-2024-6346

  Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel – Combo Blocks <= 2.2.85 - Authenticated (Contributor+) Stored Cross-Site Scripting via redirectURL Parameter of Date Countdown Widget

  pickplugins · Post Grid

  Medium6.4
• CVE-2024-4042

  Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel - Combo Blocks <= 2.2.80 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block Attribute

  pickplugins · Post Grid

  Medium6.4
• CVE-2024-1988

  Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel – Combo Blocks <= 2.2.80 - Authenticated (Contributor+) Stored Cross-Site Scripting

  pickplugins · Post Grid

  Medium6.4
• CVE-2024-3155

  Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel – Combo Blocks <= 2.2.80 - Authenticated (Contributor+) Stored Cross-Site Scripting

  pickplugins · Post Grid

  Medium6.4
• CVE-2024-32816

  WordPress Combo Blocks plugin <= 2.2.78 - Sensitive Data Exposure via API vulnerability

  PickPlugins · Post Grid

  High7.5