High
CVE-2026-96840
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 42
Reset filters
Medium
CVE-2026-105886
Ultimate Post Kit – Elementor Post Grid, Post Carousel, Post Slider & Blog Layout Widgets <= 4.5.5 - Missing Authorization
Medium
CVE-2026-86783
PostX <= 5.0.40 - Unauthenticated Information Exposure
Medium
CVE-2026-92991
Biggopti Library (Various Versions) - Cross-Site Scripting via display_id from Sigmative API
Medium
CVE-2026-5158
PostX <= 5.0.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Comments Block
Medium
CVE-2026-15100
Post Grid Gutenberg Blocks <= 5.0.32 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'searchnoresult' Block Attribute
Medium
CVE-2026-13253
Post Grid Gutenberg Blocks for News, Magazines, Blog Websites <= 5.0.31 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'moreResultsText' Block Attribute
Medium
CVE-2026-0718
Post Grid Gutenberg Blocks for News, Magazines, Blog Websites – PostX <= 5.0.5 - Missing Authorization to Limited Post Meta Modification
Medium
CVE-2026-24362
Ultimate Post Kit Addons for Elementor <= 4.0.21 - Missing Authorization
High
CVE-2026-1273
PostX <= 5.0.8 - Authenticated (Administrator+) Server-Side Request Forgery via REST API Endpoints
Medium
CVE-2025-69313
PostX <= 5.0.3 - Missing Authorization
Medium
CVE-2025-68606
PostX <= 5.0.3 - Unauthenticated Information Exposure
High
CVE-2025-12980
Post Grid Gutenberg Blocks for News, Magazines, Blog Websites – PostX <= 5.0.3 - Missing Authorization to Unauthenticated Sensitive Information Exposure
Medium
CVE-2025-14434
Ultimate Post Kit <= 4.0.15 - Unauthenticated Information Disclosure
Medium
CVE-2025-54751
PostX <= 4.1.36 - Missing Authorization
High
CVE-2025-55707
PostX <= 4.1.35 - Authenticated (Editor+) Privilege Escalation
Medium
CVE-2025-31096
PostX <= 4.1.25 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-53818
PostX <= 4.1.15 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-10728
PostX <= 4.1.16 - Missing Authorization to Arbitrary Plugin Installation/Activation
Medium
CVE-2024-50513
PostX <= 4.1.15 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2024-50443
PostX <= 4.1.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-9051
WP Ultimate Post Grid <= 3.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpupg-grid-with-filters Shortcode
Medium
CVE-2024-5662
Ultimate Post Kit Addons For Elementor – (Post Grid, Post Carousel, Post Slider, Category List, Post Tabs, Timeline, Post Ticker, Tag Cloud) <= 3.11.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Social Count (Static) Widget
Medium
CVE-2024-5223
Post Grid Gutenberg Blocks and WordPress Blog Plugin – PostX <= 4.1.1 - Authenticated (Author+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.