Read the docs

AddonMaster

Records9All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

AddonMaster records in CISA KEV

No AddonMaster vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Post Grid Master 7 records MEDIUM Bootstrap Shortcodes Ultimate 1 record LOW Load More Anything 1 record LOW

Records

7 records in Post Grid Master · all components

TI-2024-10788 CVE-2024-11642 · GHSA-7pmr-9fj2-66gq

Post Grid Master <= 3.4.12 - Missing Authorization to Unauthenticated Local PHP File Inclusion

Priority MEDIUM 51

The Post Grid Master – Custom Post Types, Taxonomies & Ajax Filter Everything with Infinite Scroll, Load More, Pagination & Shortcode Builder plugin for WordPress is vulnerable to Local File Inclusion in all versions up…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0109 Published 2025-01-09 No fix listed CWE-22
TI-2025-22244 CVE-2025-30974 · GHSA-7948-q9wp-544g

WordPress Post Grid Master plugin <= 3.4.17 - Broken Access Control vulnerability

Priority LOW 38

Missing Authorization vulnerability in Akhtarujjaman Shuvo Post Grid Master ajax-filter-posts allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post Grid Master: from n/a through…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0035 Published 2025-06-06 No fix listed CWE-862
TI-2024-28827 CVE-2024-43156 · GHSA-4p53-mpmm-4v8c

WordPress Post Grid Master plugin <= 3.4.10 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in AddonMaster Post Grid Master allows Reflected XSS.This issue affects Post Grid Master: from n/a through 3.4.10.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00271 Published 2024-08-12 No fix listed CWE-79
TI-2025-18450 CVE-2025-24733 · GHSA-ggj6-66q9-rcw5

WordPress Post Grid Master plugin <= 3.4.12 - Local File Inclusion vulnerability

Priority LOW 30

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Akhtarujjaman Shuvo Post Grid Master ajax-filter-posts allows PHP Local File Inclusion.This issue a…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00587 Published 2025-01-24 No fix listed CWE-98
TI-2025-04559 CVE-2025-5084 · GHSA-jwq8-f89h-rf2h

Post Grid Master <= 3.4.13 - Reflected Cross-Site Scripting via argsArray['read_more_text']

Priority LOW 28

The Post Grid Master plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘argsArray['read_more_text']’ parameter in all versions up to, and including, 3.4.13 due to insufficient input sanitizatio…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00604 Published 2025-07-24 No fix listed CWE-79
Open these records in search →