Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

9 records

Vendor: AddonMaster Clear all filters
TI-2025-04559 CVE-2025-5084 · GHSA-jwq8-f89h-rf2h

Post Grid Master <= 3.4.13 - Reflected Cross-Site Scripting via argsArray['read_more_text']

Priority LOW 28

The Post Grid Master plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘argsArray['read_more_text']’ parameter in all versions up to, and including, 3.4.13 due to insufficient input sanitizatio…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00604 Published 2025-07-24 No fix listed CWE-79
TI-2025-22244 CVE-2025-30974 · GHSA-7948-q9wp-544g

WordPress Post Grid Master plugin <= 3.4.17 - Broken Access Control vulnerability

Priority LOW 38

Missing Authorization vulnerability in Akhtarujjaman Shuvo Post Grid Master ajax-filter-posts allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post Grid Master: from n/a through…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0035 Published 2025-06-06 No fix listed CWE-862
TI-2025-18450 CVE-2025-24733 · GHSA-ggj6-66q9-rcw5

WordPress Post Grid Master plugin <= 3.4.12 - Local File Inclusion vulnerability

Priority LOW 30

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Akhtarujjaman Shuvo Post Grid Master ajax-filter-posts allows PHP Local File Inclusion.This issue a…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00587 Published 2025-01-24 No fix listed CWE-98
TI-2024-10788 CVE-2024-11642 · GHSA-7pmr-9fj2-66gq

Post Grid Master <= 3.4.12 - Missing Authorization to Unauthenticated Local PHP File Inclusion

Priority MEDIUM 51

The Post Grid Master – Custom Post Types, Taxonomies & Ajax Filter Everything with Infinite Scroll, Load More, Pagination & Shortcode Builder plugin for WordPress is vulnerable to Local File Inclusion in all versions up…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0109 Published 2025-01-09 No fix listed CWE-22
TI-2024-28827 CVE-2024-43156 · GHSA-4p53-mpmm-4v8c

WordPress Post Grid Master plugin <= 3.4.10 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in AddonMaster Post Grid Master allows Reflected XSS.This issue affects Post Grid Master: from n/a through 3.4.10.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00271 Published 2024-08-12 No fix listed CWE-79
TI-2023-25959 CVE-2023-47851 · GHSA-79w5-6g9q-74h7

WordPress Bootstrap Shortcodes Ultimate Plugin <= 4.3.1 is vulnerable to Cross Site Scripting (XSS)

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Akhtarujjaman Shuvo Bootstrap Shortcodes Ultimate allows Stored XSS.This issue affects Bootstrap Shortcodes Ultimate:…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00303 Published 2023-11-30 No fix listed CWE-79