Medium
CVE-2024-0881
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 65
Reset filters
High
CVE-2023-7072
Post Grid Combo – 36+ Gutenberg Blocks <= 2.2.68 - Information Exposure via get_posts API Endpoint
High
CVE-2024-2006
Post Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget <= 1.6.7 - Authenticated (Contributor+) PHP Object Injection in outpost_shortcode_metabox_markup
Medium
CVE-2023-6645
Post Grid Combo – 36+ Gutenberg Blocks <= 2.2.64 - Authenticated (Contributor+) Cross-Site Scripting
Medium
CVE-2023-48750
Void Elementor Post Grid Addon for Elementor Page builder <= 2.1.10 - Missing Authorization to Review Notice Dismissal
Medium
CVE-2023-40200
Multiple WPOnlineSupport Plugins <= (Various Versions) - Missing Authorization to Notice Dismissal
High
CVE-2023-40211
Post Grid <= 2.2.50 - Missing Authorization to Sensitive Information Exposure via REST API
Medium
CVE-2023-39923
The Post Grid <= 7.2.7 - Cross-Site Request Forgery
Medium
CVE-2022-46853
The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid <= 5.0.4 - Cross-Site Request Forgery in rttpg_spare_me
Medium
84003388-c47c-41db-8d2d-4643aa375a89
Appsero <= 1.2.1 - Missing Authorization
Medium
CVE-2022-47150
Appsero <= 1.2.0 - Cross-Site Request Forgery
Medium
CVE-2022-1266
Post Grid, Slider & Carousel Ultimate <= 1.4.3 - Authenticated (Admin+) Cross-Site Scripting
Medium
CVE-2022-0447
Post Grid < 2.1.16 - Reflected Cross-Site Scripting
Medium
CVE-2021-24986
Post Grid <= 2.1.15 - Cross-Site Scripting
High
CVE-2021-4450
Post Grid <= 2.1.12 - Contributor+ SQL Injection
Medium
CVE-2021-24488
Post Grid <= 2.1.7 - Reflected Cross-Site Scripting
Critical
f28ca2dc-404d-4abf-9d44-1b1f8309e9ee
Post Grid <= 2.0.12 - Arbitrary File Deletion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.