Is The Post Grid safe?

Every recorded flaw

• Sep 24, 2026Post Grid: Does not limit an expansion of the WordPress allowed-HTML list to its own markup and applies it site-wideCVE-2026-84151 · fixed in 7.9.5 · reported by WPScanLow 3.5
• Sep 23, 2026Contributor Cross Site Scripting (XSS) in The Post Grid <= 7.9.5 versions.CVE-2026-94680 · affects up to 7.9.5 · reported by PatchstackMedium 6.5
• Sep 23, 2026Contributor Cross Site Scripting (XSS) in The Post Grid <= 7.9.5 versions.CVE-2026-94671 · affects up to 7.9.5 · reported by PatchstackMedium 6.5
• May 27, 2026The Post Grid: Missing AuthorizationCVE-2026-49054 · affects up to 7.9.2 · reported by PatchstackMedium 4.3
• Mar 27, 2025The Post Grid: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')CVE-2025-30814 · affects up to 7.7.17 · reported by Patchstack1.1% oddsHigh 7.5
• Nov 1, 2024The Post Grid: Missing AuthorizationCVE-2024-37483 · affects up to 7.7.4 · reported by PatchstackMedium 5.4
• Nov 1, 2024The Post Grid: Missing AuthorizationCVE-2024-37482 · affects up to 7.7.4 · reported by PatchstackMedium 4.3
• Nov 1, 2024The Post Grid: Missing AuthorizationCVE-2024-37481 · affects up to 7.7.4 · reported by PatchstackMedium 6.5
• Oct 16, 2024Post Grid: Blind SQL InjectionCVE-2021-4450 · affects up to 2.1.12 · reported by WordfenceHigh 8.8
• Sep 30, 2024Post Grid: Does not sanitise and escape some of its Grid settingsCVE-2024-3635 · fixed in 7.5.0 · reported by WPScanMedium 4.8
• Aug 29, 2024The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid: Sensitive Information ExposureCVE-2024-7418 · affects up to 7.7.11 · reported by WordfenceMedium 4.3
• Jul 2, 2024The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid: Stored Cross-Site ScriptingCVE-2024-1427 · affects up to 7.7.1 · reported by WordfenceMedium 6.4
• Jun 8, 2024The Post Grid: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')CVE-2024-35739 · affects up to 7.7.1 · reported by PatchstackMedium 6.5
• May 2, 2024The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid: Unauthorized modification of dataCVE-2024-3936 · affects up to 7.6.1 · reported by WordfenceMedium 4.3
• Oct 3, 2023Cross-Site Request Forgery (CSRF) vulnerability in RadiusTheme The Post Grid plugin <= 7.2.7 versions.CVE-2023-39923 · affects up to 7.2.7 · reported by PatchstackMedium 5.4
• May 23, 2023Cross-Site Request Forgery (CSRF) vulnerability in RadiusTheme The Post Grid plugin <= 5.0.4 versions.CVE-2022-46853 · fixed in 5.0.5 · reported by PatchstackMedium 4.3
• Apr 11, 2022Post Grid: Does not sanitise and escape the post_types parameter before outputting it back in the response of the post_grid_update_taxonomies_terms_by_posttypes AJAX actionCVE-2022-0447 · fixed in 2.1.16 · reported by WPScanMedium 6.4
• Apr 11, 2022Post Grid: Does not escape the keyword parameter before outputting it back in an attributeCVE-2021-24986 · fixed in 2.1.16 · reported by WPScanMedium 6.1

Records come from the National Vulnerability Database, published by the researchers who found each flaw (Wordfence, Patchstack, WPScan and others); exploited status from CISA; exploit odds from FIRST’s EPSS; current version, installs and closures from wordpress.org, checked daily. Want every plugin on your site checked at once? Run the free website check.