PatchTheCVEpost grid vulnerabilities and fixes
Recent CVEs affecting post grid, with upgrade or downgrade steps. 5 tracked.
Also searched as: postgrid.
post grid has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 5. Most recent: 2025-05-15. Highest priority: CVE-2024-8253 (score 55/100).
- CVE-2024-9645 MEDIUM 5.4 UPGRADE The Post Grid, Posts Slider, Posts Carousel, Post Filter, Post Masonry WordPress plugin before 2.2.93 does not
- CVE-2024-8253 HIGH 8.8 UPGRADE The Post Grid and Gutenberg Blocks plugin for WordPress is vulnerable to privilege escalation in all versions
- CVE-2024-13796 MEDIUM 5.3 UPGRADE The Post Grid and Gutenberg Blocks – ComboBlocks plugin for WordPress is vulnerable to Sensitive Information E
- CVE-2024-13408 HIGH 7.5 UPGRADE The Post Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget plugin for Word
- CVE-2021-4450 HIGH 8.8 UPGRADE The Post Grid plugin for WordPress is vulnerable to blind SQL Injection via post metadata in versions up to, a
FAQ
How do I fix post grid vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is post grid being exploited right now?
None of the tracked post grid CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which post grid CVE should I patch first?
CVE-2024-8253 currently ranks highest (55/100): The Post Grid and Gutenberg Blocks plugin for WordPress is vulnerable to privilege escalation in all versions .