Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

The Post Grid — Vulnerabilities & Security Advisories 12

All 12 CVE vulnerabilities found in The Post Grid, with AI-generated Chinese analysis, references, and POCs.

Vendor: RadiusTheme

CVE ID Title CVSS Severity Published
CVE-2026-84151 The Post Grid < 7.9.5 - Contributor+ Stored HTML/iframe Injection via wp_kses_post Allow-List Widening - - 2026-09-24
CVE-2026-94680 WordPress The Post Grid plugin <= 7.9.5 - Cross Site Scripting (XSS) vulnerability CWE-79 6.5 Medium 2026-09-23
CVE-2026-94671 WordPress The Post Grid plugin <= 7.9.5 - Cross Site Scripting (XSS) vulnerability CWE-79 6.5 Medium 2026-09-23
CVE-2026-49054 WordPress The Post Grid plugin <= 7.9.2 - Broken Access Control vulnerability CWE-862 4.3 Medium 2026-05-27
CVE-2025-30814 WordPress The Post Grid plugin <= 7.7.17 - Local File Inclusion vulnerability CWE-98 7.5 High 2025-03-27
CVE-2024-37482 WordPress The Post Grid plugin <= 7.7.4 - Broken Access Control vulnerability CWE-862 4.3 Medium 2024-11-01
CVE-2024-37481 WordPress The Post Grid plugin <= 7.7.4 - Broken Access Control vulnerability CWE-862 6.5 Medium 2024-11-01
CVE-2024-37483 WordPress The Post Grid plugin <= 7.7.4 - Broken Access Control vulnerability CWE-862 5.4 Medium 2024-11-01
CVE-2024-3635 The Post Grid < 7.5.0 - Editor+ Stored XSS via Grid Creation 4.8 - 2024-09-30
CVE-2024-35739 WordPress The Post Grid plugin <= 7.7.1 - Cross Site Scripting (XSS) vulnerability CWE-79 6.5 Medium 2024-06-08
CVE-2023-39923 WordPress The Post Grid Plugin <= 7.2.7 is vulnerable to Cross Site Request Forgery (CSRF) CWE-352 5.4 Medium 2023-10-03
CVE-2022-46853 WordPress The Post Grid Plugin <= 5.0.4 is vulnerable to Cross Site Request Forgery (CSRF) CWE-352 4.3 Medium 2023-05-23

All 12 known CVE vulnerabilities affecting The Post Grid with full Chinese analysis, references, and POCs where available.