PatchTheCVE: addonmasterhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2025-5084: The Post Grid Master plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘argsArray['https://patchthecve.com/cve/CVE-2025-5084.htmlhttps://patchthecve.com/cve/CVE-2025-5084.htmlWed, 17 Jun 2026 09:47:10 +0000MEDIUM 6.1: The Post Grid Master plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘argsArray['read_more_text']’ parameter in all versions up to, and including, 3.4.13 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to iCVE-2025-30974: Missing Authorization vulnerability in Akhtarujjaman Shuvo Post Grid Master ajax-filter-posts allows Exploitinhttps://patchthecve.com/cve/CVE-2025-30974.htmlhttps://patchthecve.com/cve/CVE-2025-30974.htmlWed, 17 Jun 2026 09:09:39 +0000MEDIUM 4.3: Missing Authorization vulnerability in Akhtarujjaman Shuvo Post Grid Master ajax-filter-posts allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post Grid Master: from n/a through <= 3.4.17.CVE-2025-24733: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerhttps://patchthecve.com/cve/CVE-2025-24733.htmlhttps://patchthecve.com/cve/CVE-2025-24733.htmlWed, 17 Jun 2026 08:59:31 +0000MEDIUM 6.5: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Akhtarujjaman Shuvo Post Grid Master ajax-filter-posts allows PHP Local File Inclusion.This issue affects Post Grid Master: from n/a through <= 3.4.12.CVE-2024-11642: The Post Grid Master – Custom Post Types, Taxonomies & Ajax Filter Everything with Infinite Scroll, Load More,https://patchthecve.com/cve/CVE-2024-11642.htmlhttps://patchthecve.com/cve/CVE-2024-11642.htmlWed, 17 Jun 2026 06:58:08 +0000CRITICAL 9.8: The Post Grid Master – Custom Post Types, Taxonomies & Ajax Filter Everything with Infinite Scroll, Load More, Pagination & Shortcode Builder plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.4.12 via the 'locate_template' function. This makes it possCVE-2024-43156: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Ahttps://patchthecve.com/cve/CVE-2024-43156.htmlhttps://patchthecve.com/cve/CVE-2024-43156.htmlWed, 17 Jun 2026 07:50:32 +0000HIGH 7.1: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in AddonMaster Post Grid Master allows Reflected XSS.This issue affects Post Grid Master: from n/a through 3.4.10.