Post Grid Gutenberg Blocks – PostX

Уязвимости

• CVE-2024-10728подписчик+≤ 4.1.16

  PostX <= 4.1.16 - Missing Authorization to Arbitrary Plugin Installation/Activation

  Высокий 8.8

• CVE-2024-31246автор+≤ 3.2.3

  WordPress PostX plugin <= 3.2.3 - Author+ Post/Page Duplication vulnerability

  Высокий 8.8

• CVE-2024-5326участник+≤ 4.1.2

  Post Grid Gutenberg Blocks and WordPress Blog Plugin – PostX <= 4.1.2 - Missing Authorization to Arbitrary Options Update

  Высокий 8.8

• CVE-2025-69313без авторизации≤ 5.0.3

  WordPress PostX plugin <= 5.0.3 - Broken Access Control vulnerability

  Высокий 7.5

• CVE-2025-12980без авторизации≤ 5.0.3

  Post Grid Gutenberg Blocks for News, Magazines, Blog Websites – PostX <= 5.0.3 - Missing Authorization to Unauthenticated Sensitive Information Exposure

  Высокий 7.5

• CVE-2026-1273админ≤ 5.0.8

  PostX <= 5.0.8 - Authenticated (Administrator+) Server-Side Request Forgery via REST API Endpoints

  Высокий 7.2

• CVE-2025-55707высокие права≤ 4.1.35

  WordPress PostX Plugin <= 4.1.35 - Privilege Escalation Vulnerability

  Высокий 7.2

• CVE-2025-54751нужен вход≤ 4.1.36

  WordPress PostX plugin <= 4.1.36 - Broken Access Control vulnerability

  Высокий 7.1

• CVE-2025-31096нужен вход≤ 4.1.25

  WordPress PostX plugin <= 4.1.25 - Cross Site Scripting (XSS) Vulnerability

  Средний 6.5

• CVE-2024-53818нужен вход≤ 4.1.15

  WordPress PostX plugin <= 4.1.15 - Cross Site Scripting (XSS) vulnerability

  Средний 6.5

• CVE-2024-32564нужен вход≤ 4.0.1

  WordPress PostX plugin <= 4.0.1 - Cross Site Scripting (XSS) vulnerability

  Средний 6.5

• CVE-2026-5158участник+≤ 5.0.13

  PostX <= 5.0.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Comments Block

  Средний 6.4

• CVE-2026-15100участник+≤ 5.0.32

  Post Grid Gutenberg Blocks <= 5.0.32 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'searchnoresult' Block Attribute

  Средний 6.4

• CVE-2026-13253участник+≤ 5.0.31

  Post Grid Gutenberg Blocks for News, Magazines, Blog Websites <= 5.0.31 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'moreResultsText' Block A

  Средний 6.4

• CVE-2024-5223автор+≤ 4.1.1

  Post Grid Gutenberg Blocks and WordPress Blog Plugin – PostX <= 4.1.1 - Authenticated (Author+) Stored Cross-Site Scripting

  Средний 6.4

• CVE-2023-36385без авторизации · нужен клик≤ 2.9.9

  WordPress PostX – Gutenberg Blocks for Post Grid Plugin <= 2.9.9 is vulnerable to Cross Site Scripting (XSS)

  Средний 6.1

• CVE-2024-50513высокие права≤ 4.1.15

  WordPress PostX plugin <= 4.1.15 - Cross Site Scripting (XSS) vulnerability

  Средний 5.9

• CVE-2024-50443нужен вход≤ 4.1.12

  WordPress PostX plugin <= 4.1.12 - Cross Site Scripting (XSS) vulnerability

  Средний 5.4

• CVE-2026-0718без авторизации≤ 5.0.5

  Post Grid Gutenberg Blocks for News, Magazines, Blog Websites – PostX <= 5.0.5 - Missing Authorization to Limited Post Meta Modification

  Средний 5.3

• CVE-2025-68606без авторизации≤ 5.0.3

  WordPress PostX plugin <= 5.0.3 - Sensitive Data Exposure vulnerability

  Средний 5.3