Post Grid Gutenberg Blocks – PostX

Güvenlik açıkları

• CVE-2024-10728abone+≤ 4.1.16

  PostX <= 4.1.16 - Missing Authorization to Arbitrary Plugin Installation/Activation

  Yüksek 8.8

• CVE-2024-31246yazar+≤ 3.2.3

  WordPress PostX plugin <= 3.2.3 - Author+ Post/Page Duplication vulnerability

  Yüksek 8.8

• CVE-2024-5326katılımcı+≤ 4.1.2

  Post Grid Gutenberg Blocks and WordPress Blog Plugin – PostX <= 4.1.2 - Missing Authorization to Arbitrary Options Update

  Yüksek 8.8

• CVE-2025-69313kimlik doğrulamasız≤ 5.0.3

  WordPress PostX plugin <= 5.0.3 - Broken Access Control vulnerability

  Yüksek 7.5

• CVE-2025-12980kimlik doğrulamasız≤ 5.0.3

  Post Grid Gutenberg Blocks for News, Magazines, Blog Websites – PostX <= 5.0.3 - Missing Authorization to Unauthenticated Sensitive Information Exposure

  Yüksek 7.5

• CVE-2026-1273yönetici≤ 5.0.8

  PostX <= 5.0.8 - Authenticated (Administrator+) Server-Side Request Forgery via REST API Endpoints

  Yüksek 7.2

• CVE-2025-55707yüksek yetki≤ 4.1.35

  WordPress PostX Plugin <= 4.1.35 - Privilege Escalation Vulnerability

  Yüksek 7.2

• CVE-2025-54751giriş gerekir≤ 4.1.36

  WordPress PostX plugin <= 4.1.36 - Broken Access Control vulnerability

  Yüksek 7.1

• CVE-2025-31096giriş gerekir≤ 4.1.25

  WordPress PostX plugin <= 4.1.25 - Cross Site Scripting (XSS) Vulnerability

  Orta 6.5

• CVE-2024-53818giriş gerekir≤ 4.1.15

  WordPress PostX plugin <= 4.1.15 - Cross Site Scripting (XSS) vulnerability

  Orta 6.5

• CVE-2024-32564giriş gerekir≤ 4.0.1

  WordPress PostX plugin <= 4.0.1 - Cross Site Scripting (XSS) vulnerability

  Orta 6.5

• CVE-2026-5158katılımcı+≤ 5.0.13

  PostX <= 5.0.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Comments Block

  Orta 6.4

• CVE-2026-15100katılımcı+≤ 5.0.32

  Post Grid Gutenberg Blocks <= 5.0.32 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'searchnoresult' Block Attribute

  Orta 6.4

• CVE-2026-13253katılımcı+≤ 5.0.31

  Post Grid Gutenberg Blocks for News, Magazines, Blog Websites <= 5.0.31 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'moreResultsText' Block A

  Orta 6.4

• CVE-2024-5223yazar+≤ 4.1.1

  Post Grid Gutenberg Blocks and WordPress Blog Plugin – PostX <= 4.1.1 - Authenticated (Author+) Stored Cross-Site Scripting

  Orta 6.4

• CVE-2023-36385kimlik doğrulamasız · tıklama gerekir≤ 2.9.9

  WordPress PostX – Gutenberg Blocks for Post Grid Plugin <= 2.9.9 is vulnerable to Cross Site Scripting (XSS)

  Orta 6.1

• CVE-2024-50513yüksek yetki≤ 4.1.15

  WordPress PostX plugin <= 4.1.15 - Cross Site Scripting (XSS) vulnerability

  Orta 5.9

• CVE-2024-50443giriş gerekir≤ 4.1.12

  WordPress PostX plugin <= 4.1.12 - Cross Site Scripting (XSS) vulnerability

  Orta 5.4

• CVE-2026-0718kimlik doğrulamasız≤ 5.0.5

  Post Grid Gutenberg Blocks for News, Magazines, Blog Websites – PostX <= 5.0.5 - Missing Authorization to Limited Post Meta Modification

  Orta 5.3

• CVE-2025-68606kimlik doğrulamasız≤ 5.0.3

  WordPress PostX plugin <= 5.0.3 - Sensitive Data Exposure vulnerability

  Orta 5.3