Approved changes feed: RSS · Atom

cpe:2.3:a:pickplugins:post_grid_and_gutenberg_blocks:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPickplugins (03c448d6-40a7-5ce8-8d7e-bbbe6a0aa644)
ProductPost Grid And Gutenberg Blocks (11be536d-6ab3-55e6-8174-0b85d861b38c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-68605 vulnerable 2026-06-08 07:41:21.443684 WordPress Post Grid and Gutenberg Blocks plugin <= 2.3.23 - Cross Site Scripting (XSS) vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PickPlugins Post Grid and Gutenberg Blocks post-grid allows Stored XSS.This issue affects Post Grid and Gutenberg Blocks: from n/a through <= 2.3.23.
Published: 2025-12-24T13:10:48.261Z
Updated: 2026-04-28T16:14:31.280Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-66058 vulnerable 2026-06-08 07:39:21.179439 WordPress Post Grid and Gutenberg Blocks plugin <= 2.3.17 - Broken Access Control vulnerability
MEDIUM (6.5)
Missing Authorization vulnerability in PickPlugins Post Grid and Gutenberg Blocks post-grid allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post Grid and Gutenberg Blocks: from n/a through <= 2.3.17.
Published: 2025-12-18T16:15:15.498Z
Updated: 2026-04-28T16:14:15.298Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-63043 vulnerable 2026-06-08 07:39:17.210819 WordPress Post Grid and Gutenberg Blocks plugin <= 2.3.23 - Insecure Direct Object References (IDOR) vulnerability
MEDIUM (5.3)
Authorization Bypass Through User-Controlled Key vulnerability in PickPlugins Post Grid and Gutenberg Blocks post-grid allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post Grid and Gutenberg Blocks: from n/a through <= 2.3.23.
Published: 2025-12-18T16:45:08.201Z
Updated: 2026-04-28T16:14:09.149Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-62924 vulnerable 2026-06-08 07:39:17.027963 WordPress Post Grid and Gutenberg Blocks plugin <= 2.3.17 - Broken Access Control vulnerability
MEDIUM (6.5)
Missing Authorization vulnerability in PickPlugins Post Grid and Gutenberg Blocks post-grid allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post Grid and Gutenberg Blocks: from n/a through <= 2.3.17.
Published: 2025-10-27T01:33:58.866Z
Updated: 2026-04-28T18:57:34.749Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54007 vulnerable 2026-06-08 07:31:16.109313 WordPress Post Grid and Gutenberg Blocks Plugin <= 2.3.11 - PHP Object Injection Vulnerability
HIGH (8.8)
Deserialization of Untrusted Data vulnerability in PickPlugins Post Grid and Gutenberg Blocks post-grid allows Object Injection.This issue affects Post Grid and Gutenberg Blocks: from n/a through <= 2.3.11.
Published: 2025-08-20T08:03:05.419Z
Updated: 2026-05-13T00:05:06.943Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-8253 vulnerable 2026-06-08 07:00:23.394594 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-50432 vulnerable 2026-06-08 06:52:10.069916 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-47340 vulnerable 2026-06-08 06:48:11.807296 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.