PostX
WPXPO
Developer
5.0.12
Latest version
40,000
Installations
No date
Last updated
Vulnerability history
0 present
23 patched
7 Mitigation rules
- Authenticated (Administrator+) Server-Side Request Forgery via REST API Endpoints vulnerability<= 5.0.803/03/2026
- WordPress Post Grid Gutenberg Blocks and WordPress Blog Plugin - PostX plugin <= 4.1.2 - Missing Authorization to Arbitrary Options Update vulnerability<= 4.1.202/02/2026
- Contributor+ Stored XSS vulnerability< 4.0.230/01/2026
- Broken Access Control vulnerability<= 5.0.319/01/2026
- WordPress Post Grid Gutenberg Blocks for News, Magazines, Blog Websites - PostX plugin <= 5.0.3 - Missing Authorization to Unauthenticated Sensitive Information Exposure vulnerability<= 5.0.331/12/2025
- Sensitive Data Exposure vulnerability<= 5.0.321/12/2025
- Broken Access Control vulnerability<= 4.1.3602/09/2025
- Privilege Escalation Vulnerability<= 4.1.3529/08/2025
- Cross Site Scripting (XSS) Vulnerability<= 4.1.2528/03/2025
- Cross Site Scripting (XSS) vulnerability<= 4.1.1502/12/2024
- Missing Authorization to Arbitrary Plugin Installation/Activation vulnerability<= 4.1.1618/11/2024
- Cross Site Scripting (XSS) vulnerability<= 4.1.1528/10/2024
- Cross Site Scripting (XSS) vulnerability<= 4.1.1224/10/2024
- Authenticated (Author+) Stored Cross-Site Scripting vulnerability<= 4.1.129/05/2024
- Contributor+ Stored XSS vulnerability< 4.1.027/05/2024
- Cross Site Scripting (XSS) vulnerability<= 4.0.116/04/2024
- Author+ Post/Page Duplication vulnerability<= 3.2.305/04/2024
- Reflected Cross-Site Scripting vulnerability<= 3.0.502/08/2023
- Cross Site Scripting (XSS) vulnerability<= 2.9.923/06/2023
- Stored Cross-Site Scripting (XSS) vulnerability<= 2.4.926/08/2021
- Stored Cross-Site Scripting (XSS) vulnerability<= 2.4.926/08/2021
- Private Content Disclosure vulnerability<= 2.4.926/08/2021
- Missing Access Controls vulnerability<= 2.4.917/08/2021