WordPress plugin
Post Grid Gutenberg Blocks – PostX security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 29 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High7
- Medium22
- Low0
All Post Grid Gutenberg Blocks – PostX vulnerabilities
- High7.2Unauthenticated Stored Cross-Site Scripting via display_name User Field
≤5.1.0Update to 5.1.1
- Medium5.3Unauthenticated Information Exposure
≤5.0.40Update to 5.0.41
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Post Comments Block
≤5.0.13Update to 5.0.14
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via 'searchnoresult' Block Attribute
≤5.0.32Update to 5.0.33
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via 'moreResultsText' Block Attribute
≤5.0.31Update to 5.0.32
- Medium5.3Missing Authorization to Limited Post Meta Modification
≤5.0.5Update to 5.0.6
- High7.2Authenticated (Administrator+) Server-Side Request Forgery via REST API Endpoints
≤5.0.8Update to 5.0.9
- Medium5.3Missing Authorization
≤5.0.3Update to 5.0.4
- Medium5.3Unauthenticated Information Exposure
≤5.0.3Update to 5.0.4
- High7.5Missing Authorization to Unauthenticated Sensitive Information Exposure
≤5.0.3Update to 5.0.4
- Medium4.3Missing Authorization
≤4.1.36Update to 4.1.37
- High7.2Authenticated (Editor+) Privilege Escalation
≤4.1.35Update to 4.1.36
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤4.1.25Update to 4.1.26
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤4.1.15Update to 4.1.16
- High8.8Missing Authorization to Arbitrary Plugin Installation/Activation
≤4.1.16Update to 4.1.17
- Medium6.4Authenticated (Author+) Stored Cross-Site Scripting
≤4.1.15Update to 4.1.16
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤4.1.12Update to 4.1.13
- Medium6.4Authenticated (Author+) Stored Cross-Site Scripting
≤4.1.1Update to 4.1.2
- High8.8Missing Authorization to Arbitrary Options Update
≤4.1.2Update to 4.1.3
- Medium6.4Authenticated (Contributor+) Stored Cross=Site Scripting
≤4.0.4Update to 4.1.0
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤4.0.1Update to 4.0.2
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤4.0.1Update to 4.0.2
- Medium4.3Incorrect Authorization
≤3.2.3Update to 3.2.4
- Medium6.1Gutenberg Post Grid Blocks <= 3.0.5 - Reflected Cross-Site Scripting via 'postx_type'
≤3.0.5Update to 3.0.6
- High7.2Unauthenticated Cross-Site Scripting
≤2.9.9Update to 2.9.10
- Medium5.4Gutenberg Blocks for Post Grid <= 2.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
<2.4.10Update to 2.4.10
- Medium4.3Private Content Disclosure
≤2.4.9Update to 2.4.10
- Medium5.4Gutenberg Blocks for Post Grid <= 2.4.9 - Stored Cross-Site Scripting
<2.4.10Update to 2.4.10
- Medium6.5Gutenberg Blocks for Post Grid <= 2.4.9 - Unauthorized Access Controls
<2.4.10Update to 2.4.10
Post Grid Gutenberg Blocks – PostX: common questions
Does Post Grid Gutenberg Blocks – PostX have known vulnerabilities?
Yes. VulnCrest Radar lists 29 known vulnerabilities in Post Grid Gutenberg Blocks – PostX: 7 high, 22 medium. None are known to affect version null.
How do I check which version of Post Grid Gutenberg Blocks – PostX I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Post Grid Gutenberg Blocks – PostX vulnerability?
CVE-2026-96840, published Oct 9, 2026: Post Grid Gutenberg Blocks <= 5.1.0 - Unauthenticated Stored Cross-Site Scripting via display_name User Field. Severity: High (CVSS 7.2).
Is any Post Grid Gutenberg Blocks – PostX vulnerability listed in CISA KEV?
No. None of the known Post Grid Gutenberg Blocks – PostX vulnerabilities is currently listed in the CISA KEV catalog.