Skip to content
Noroxi

AddonMaster records

9 published records for vendor addonmaster.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
1
With a fix record
44.4%
Median publish → KEV
No record has entered KEV

Records by year

  1. 23
  2. 24
  3. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

9 records
  • CVE-2024-11642
    39Monitor

    Post Grid Master <= 3.4.12 - Missing Authorization to Unauthenticated Local PHP File Inclusion

    CriticalCVSS 9.8No exploitEPSS 1%

    addonmaster · post grid masterJan 9, 2025

  • CVE-2025-30974
    35Monitor

    WordPress Post Grid Master plugin <= 3.4.17 - Broken Access Control vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    addonmaster · post grid masterJun 6, 2025

  • CVE-2025-24733
    26Monitor

    WordPress Post Grid Master plugin <= 3.4.12 - Local File Inclusion vulnerability

    MediumCVSS 6.5No exploitEPSS 1%

    addonmaster · post grid masterJan 24, 2025

  • CVE-2024-34390
    26Monitor

    WordPress Post Grid Master plugin <= 3.4.8 - Auth. Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    addonmaster · post grid masterMay 6, 2024

  • CVE-2024-24704
    25Monitor

    WordPress Load More Anything plugin <= 3.3.3 - Broken Access Control vulnerability

    MediumCVSS 6.3No exploitEPSS 0%

    addonmaster · load more anythingJun 11, 2024

  • CVE-2025-5084
    24Monitor

    Post Grid Master <= 3.4.13 - Reflected Cross-Site Scripting via argsArray['read_more_text']

    MediumCVSS 6.1No exploitEPSS 1%

    addonmaster · post grid masterJul 24, 2025

  • CVE-2024-43156
    24Monitor

    WordPress Post Grid Master plugin <= 3.4.10 - Reflected Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.1No exploitEPSS 0%

    addonmaster · post grid masterAug 12, 2024

  • CVE-2024-34372
    21Monitor

    WordPress Post Grid Master plugin <= 3.4.7 - Broken Access Control vulnerability

    MediumCVSS 5.3No exploitEPSS 0%

    addonmaster · post grid masterMay 6, 2024

  • CVE-2023-47851
    21Monitor

    WordPress Bootstrap Shortcodes Ultimate Plugin <= 4.3.1 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 5.4No exploitEPSS 0%

    addonmaster · bootstrap shortcodes ultimateNov 30, 2023