PG
Product
Post Grid, Slider & Carousel Ultimate
5
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 3Medium 2Low 0
Watch
Add Post Grid, Slider & Carousel Ultimate to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-24782 | 8.8 | Jan 27 | WordPress Post Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget plugin <= 1.6.10 - Local File Inclusion vulnerability Affected: through 1.6.10 |
| CVE-2024-13409 | 8.8 | Jan 24 | Post Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget <= 1.6.10 - Authenticated (Contributor+) Local File Inclusion via post_type_ajax_handler() Affected: before 1.7 |
| CVE-2024-2006 | 8.8 | Mar 13 | Post Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget <= 1.6.7 - Authenticated (Contributor+) PHP Object Injection in outpost_shortcode_metabox_markup Affected: before 1.6.8 |
| CVE-2024-29925 | 5.4 | Mar 27 | WordPress Post Grid, Slider & Carousel Ultimate plugin <= 1.6.6 - Cross Site Scripting (XSS) vulnerability Affected: through 1.6.6 |
| CVE-2022-1266 | 4.8 | Jun 20 | The Post Grid, Slider & Carousel Ultimate WordPress plugin before 1.5.0 does not sanitise and escape the Header Title, which could allow high privilege users to perform Cross-Site… Affected: before 1.5.0 |
Showing 5
