Wpxpo Postx — known CVE vulnerabilities

Every CVE whose affected-product data names Wpxpo Postx, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (7)

• CVE-2024-10728 — CVSS 8.8 (high): The Post Grid Gutenberg Blocks and WordPress Blog Plugin – PostX plugin for WordPress is vulnerable to unauthorized plugin…
• CVE-2023-36385 — CVSS 7.1 (high): Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in wpxpo PostX – Gutenberg Post Grid Blocks plugin <= 2.9.9 versions.
• CVE-2024-4305 — CVSS 6.8 (medium): The Post Grid Gutenberg Blocks and WordPress Blog Plugin WordPress plugin before 4.1.0 does not validate and escape some of its block…
• CVE-2024-50443 — CVSS 6.5 (medium): Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPXPO PostX ultimate-post.This issue…
• CVE-2023-3992 — CVSS 6.1 (medium): The PostX WordPress plugin before 3.0.6 does not sanitise and escape a parameter before outputting it back in the page, leading to a…
• CVE-2024-31246 — CVSS 5.4 (medium): Missing Authorization vulnerability in WPXPO PostX ultimate-post allows Exploiting Incorrectly Configured Access Control Security…
• CVE-2024-3239 — CVSS 5.4 (medium): The Post Grid Gutenberg Blocks and WordPress Blog Plugin WordPress plugin before 4.0.2 does not validate and escape some of its block…