WordPress plugin
Post Grid Master — Post Grids & AJAX Filters security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical1
- High1
- Medium5
- Low0
All Post Grid Master — Post Grids & AJAX Filters vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium6.1 | Reflected Cross-Site Scripting via argsArray['read_more_text'] ≤3.4.13Update to 3.4.14 | CVE-2025-5084 | |
| Medium4.3 | Missing Authorization ≤3.4.14No patch available | CVE-2025-30974 | |
| High8.8 | Authenticated (Contributor+) Local File Inclusion ≤3.4.12Update to 3.4.13 | CVE-2025-24733 | |
| Critical9.8 | Missing Authorization to Unauthenticated Local PHP File Inclusion ≤3.4.12Update to 3.4.13 | CVE-2024-11642 | |
| Medium6.1 | Reflected Cross-Site Scripting ≤3.4.10Update to 3.4.11 | CVE-2024-43156 | |
| Medium5.4 | Authenticated (Contributor+) Stored Cross-Site Scripting ≤3.4.11Update to 3.4.12 | CVE-2024-34390 | |
| Medium5.3 | Missing Authorization ≤3.4.7Update to 3.4.8 | CVE-2024-34372 |
- Medium6.1Reflected Cross-Site Scripting via argsArray['read_more_text']
≤3.4.13Update to 3.4.14
- Medium4.3Missing Authorization
≤3.4.14No patch available
- High8.8Authenticated (Contributor+) Local File Inclusion
≤3.4.12Update to 3.4.13
- Critical9.8Missing Authorization to Unauthenticated Local PHP File Inclusion
≤3.4.12Update to 3.4.13
- Medium6.1Reflected Cross-Site Scripting
≤3.4.10Update to 3.4.11
- Medium5.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤3.4.11Update to 3.4.12
- Medium5.3Missing Authorization
≤3.4.7Update to 3.4.8
Post Grid Master — Post Grids & AJAX Filters: common questions
Does Post Grid Master — Post Grids & AJAX Filters have known vulnerabilities?
Yes. VulnCrest Radar lists 7 known vulnerabilities in Post Grid Master — Post Grids & AJAX Filters: 1 critical, 1 high, 5 medium. At least one is not fixed in the latest version.
How do I check which version of Post Grid Master — Post Grids & AJAX Filters I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Post Grid Master — Post Grids & AJAX Filters vulnerability?
CVE-2025-5084, published Jul 23, 2025: Post Grid Master <= 3.4.13 - Reflected Cross-Site Scripting via argsArray['read_more_text']. Severity: Medium (CVSS 6.1).
Is any Post Grid Master — Post Grids & AJAX Filters vulnerability listed in CISA KEV?
No. None of the known Post Grid Master — Post Grids & AJAX Filters vulnerabilities is currently listed in the CISA KEV catalog.