Medium
CVE-2026-94680
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 15
Reset filters
Medium
CVE-2026-94671
The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid <= 7.9.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-84151
The Post Grid <= 7.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-49054
The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid <= 7.9.2 - Missing Authorization
High
CVE-2025-30814
The Post Grid <= 7.7.17 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-3635
The Post Grid <= 7.4.3 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2024-7418
The Post Grid <= 7.7.11 - Authenticated (Contributor+) Information Disclosure
Medium
CVE-2024-37481
The Post Grid <= 7.7.4 - Missing Authorization via REST API
Medium
CVE-2024-37482
The Post Grid <= 7.7.4 - Missing Authorization via AJAX
Medium
CVE-2024-37483
The Post Grid <= 7.7.4 - Missing Authorization via save_block_css
Medium
CVE-2024-1427
The Post Grid <= 7.7.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via section title tag
Medium
CVE-2024-35739
The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid <= 7.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-3936
The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid <= 7.6.1 - Missing Authorization
Medium
CVE-2023-39923
The Post Grid <= 7.2.7 - Cross-Site Request Forgery
Medium
CVE-2022-46853
The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid <= 5.0.4 - Cross-Site Request Forgery in rttpg_spare_me
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.