Post Grid Master (Addonmaster) - vulnerabilities (CVEs)
7 CVEs, 0 in the last 30 days, 26 known versions, newest CVE from 2025-07-24. Vendor: Addonmaster.
CVEs of Post Grid Master
- CVE-2025-5084 - CVSS 6.1 (medium), 2025-07-24: The Post Grid Master plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘argsArray['read_more_text']’ parameter in all versions up…
- CVE-2025-30974 - CVSS 8.8 (high), 2025-06-06: Missing Authorization vulnerability in Akhtarujjaman Shuvo Post Grid Master ajax-filter-posts allows Exploiting Incorrectly Configured Access Control Security…
- CVE-2025-24733 - CVSS 6.5 (medium), 2025-01-24: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Akhtarujjaman Shuvo Post Grid Master…
- CVE-2024-11642 - CVSS 9.8 (critical), 2025-01-09: The Post Grid Master – Custom Post Types, Taxonomies & Ajax Filter Everything with Infinite Scroll, Load More, Pagination & Shortcode Builder plugin for…
- CVE-2024-43156 - CVSS 7.1 (high), 2024-08-12: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in AddonMaster Post Grid Master allows Reflected…
- CVE-2024-34390 - CVSS 6.5 (medium), 2024-05-06: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AddonMaster Post Grid Master allows Stored XSS.This…
- CVE-2024-34372 - CVSS 5.3 (medium), 2024-05-06: Missing Authorization vulnerability in AddonMaster Post Grid Master.This issue affects Post Grid Master: from n/a through 3.4.7.
