WordPress plugin
FancyPost – Post Blocks, Grids & Sliders for Block Editor and Elementor security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical0
- High0
- Medium3
- Low0
All FancyPost – Post Blocks, Grids & Sliders for Block Editor and Elementor vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium6.4 | Authenticated (Contributor+) Stored Cross-Site Scripting ≤6.0.1No patch available | CVE-2025-31875 | |
| Medium4.3 | Missing Authorization to Authenticated (Subscriber+) Shortcode Export ≤6.0.0Update to 6.0.1 | CVE-2024-10536 | |
| Medium6.4 | Authenticated (Author+) Stored Cross-Site Scripting ≤5.3.1Update to 5.3.2 | CVE-2024-38686 |
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤6.0.1No patch available
- Medium4.3Missing Authorization to Authenticated (Subscriber+) Shortcode Export
≤6.0.0Update to 6.0.1
- Medium6.4Authenticated (Author+) Stored Cross-Site Scripting
≤5.3.1Update to 5.3.2
FancyPost – Post Blocks, Grids & Sliders for Block Editor and Elementor: common questions
Does FancyPost – Post Blocks, Grids & Sliders for Block Editor and Elementor have known vulnerabilities?
Yes. VulnCrest Radar lists 3 known vulnerabilities in FancyPost – Post Blocks, Grids & Sliders for Block Editor and Elementor: 3 medium. At least one is not fixed in the latest version.
How do I check which version of FancyPost – Post Blocks, Grids & Sliders for Block Editor and Elementor I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent FancyPost – Post Blocks, Grids & Sliders for Block Editor and Elementor vulnerability?
CVE-2025-31875, published Apr 1, 2025: FancyPost <= 6.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting. Severity: Medium (CVSS 6.4).
Is any FancyPost – Post Blocks, Grids & Sliders for Block Editor and Elementor vulnerability listed in CISA KEV?
No. None of the known FancyPost – Post Blocks, Grids & Sliders for Block Editor and Elementor vulnerabilities is currently listed in the CISA KEV catalog.