All products
post-grid-carousel-ultimate
WordPress · Plugin9 reports| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|
| Post Grid, Slider & Carousel Ultimate <= 1.8.0 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2026-16260 |
post-grid-carousel-ultimate |
WordPress |
Medium
|
Fix reported |
|
| Post Grid, Slider & Carousel Ultimate <= 1.6.10 - Authenticated (Contributor+) Local File InclusionCVE-2025-24782 |
post-grid-carousel-ultimate |
WordPress |
High
|
Fix reported |
|
| Post Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget <= 1.6.10 - Authenticated (Contributor+) Local File InclusionCVE-2024-13408 |
post-grid-carousel-ultimate |
WordPress |
High
|
Fix reported |
|
| Post Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget <= 1.6.10 - Authenticated (Contributor+) Local File Inclusion via post_type_ajax_handler()CVE-2024-13409 |
post-grid-carousel-ultimate |
WordPress |
High
|
Fix reported |
|
| Appsero <= 1.2.0 - Cross-Site Request ForgeryCVE-2022-47150 |
bangladeshi-payment-gatewaysboostify-header-footer-builder |
WordPress |
Medium
|
Fix reported |
|
| Appsero <= 1.2.1 - Missing Authorization |
bangladeshi-payment-gatewaysboostify-header-footer-builder |
WordPress |
Medium
|
Fix reported |
|
| Post Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget <= 1.6.7 - Authenticated (Contributor+) PHP Object Injection in outpost_shortcode_metabox_markupCVE-2024-2006 |
post-grid-carousel-ultimate |
WordPress |
High
|
Fix reported |
|
| Post Grid, Slider & Carousel Ultimate <= 1.6.6 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-29925 |
post-grid-carousel-ultimate |
WordPress |
Medium
|
Fix reported |
|
| Post Grid, Slider & Carousel Ultimate <= 1.4.3 - Authenticated (Admin+) Cross-Site ScriptingCVE-2022-1266 |
post-grid-carousel-ultimate |
WordPress |
Medium
|
Fix reported |
|
