Post Grid Carousel Ultimate Vulnerabilities

The Post Grid, Slider & Carousel Ultimate plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 1.6.10. This makes it possible for authenticated attackers, with contributor-level access and above, to include and execute arbitrary files on the server, allowing the execution of any...

CVSS:

8.8

Affected:

up to 1.6.10

Fixed in:

1.7

Disclosed:

Jan 27, 2025

CVE-2025-24782 on NVD →

[en] Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in wpWax Post Grid, Slider & Carousel Ultimate allows PHP Local File Inclusion. This issue affects Post Grid, Slider & Carousel Ultimate: from n/a through 1.6.10.

Affected:

up to 1.7

Fixed in:

1.7

Disclosed:

Jan 27, 2025

CVE-2025-24782 on NVD →

[en] The Post Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.6.10 via the 'theme' parameter of the post_type_ajax_handler() function. This makes it possible for authenticated attacke...

Affected:

up to 1.7

Fixed in:

1.7

Disclosed:

Jan 24, 2025

CVE-2024-13409 on NVD →

[en] The Post Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.6.10 via the 'theme' attribute of the `pgcu` shortcode. This makes it possible for authenticated attackers, with Contribu...

Affected:

up to 1.7

Fixed in:

1.7

Disclosed:

Jan 24, 2025

CVE-2024-13408 on NVD →

The Post Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.6.10 via the 'theme' parameter of the post_type_ajax_handler() function. This makes it possible for authenticated attackers, w...

CVSS:

7.5

Affected:

up to 1.6.10

Fixed in:

1.7

Disclosed:

Jan 23, 2025

CVE-2024-13409 on NVD →

The Post Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.6.10 via the 'theme' attribute of the `pgcu` shortcode. This makes it possible for authenticated attackers, with Contributor-l...

CVSS:

7.5

Affected:

up to 1.6.10

Fixed in:

1.7

Disclosed:

Jan 23, 2025

CVE-2024-13408 on NVD →

[en] Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpWax Post Grid, Slider & Carousel Ultimate allows Stored XSS.This issue affects Post Grid, Slider & Carousel Ultimate: from n/a through 1.6.6.

Affected:

up to 1.6.7

Fixed in:

1.6.7

Disclosed:

Mar 27, 2024

CVE-2024-29925 on NVD →

The Post Grid, Slider & Carousel Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.6.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary...

CVSS:

6.4

Affected:

up to 1.6.6

Fixed in:

1.6.7

Disclosed:

Mar 25, 2024

CVE-2024-29925 on NVD →

[en] The Post Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.6.7 via deserialization of untrusted input in the outpost_shortcode_metabox_markup function. This makes it possible for a...

Affected:

up to 1.6.8

Fixed in:

1.6.8

Disclosed:

Mar 13, 2024

CVE-2024-2006 on NVD →

The Post Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.6.7 via deserialization of untrusted input in the outpost_shortcode_metabox_markup function. This makes it possible for authen...

CVSS:

8.8

Affected:

up to 1.6.7

Fixed in:

1.6.8

Disclosed:

Mar 5, 2024

CVE-2024-2006 on NVD →

The Appsero analytics tool used in several plugins is vulnerable to authorization bypass due to a missing capability check on the uninstall_reason_submission function used for feedback submission in versions up to, and including, 1.2.1. This makes it possible for authenticated attackers, with subscriber-level permissio...

CVSS:

4.3

Affected:

up to 1.6.3

Fixed in:

1.6.4

Disclosed:

Dec 16, 2022

The Appsero analytics tool used in several plugins is vulnerable to Cross-Site Request Forgery due to a missing nonce check on the uninstall_reason_submission function used for feedback submission in versions up to, and including, 1.2.0. This makes it possible for unauthenticated attackers to invoke this function inten...

CVSS:

4.3

Affected:

up to 1.6.3

Fixed in:

1.6.4

Disclosed:

Dec 14, 2022

CVE-2022-47150 on NVD →

[en] The Post Grid, Slider & Carousel Ultimate WordPress plugin before 1.5.0 does not sanitise and escape the Header Title, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.

Affected:

up to 1.5.0

Fixed in:

1.5.0

Disclosed:

Jun 20, 2022

CVE-2022-1266 on NVD →

The Post Grid, Slider & Carousel Ultimate WordPress plugin before 1.5.0 does not sanitise and escape the Header Title, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.

CVSS:

5.5

Affected:

up to 1.5.0

Fixed in:

1.5.0

Disclosed:

May 26, 2022

CVE-2022-1266 on NVD →

** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.

Affected:

up to 1.6.4

Fixed in:

1.6.4

CVE-2022-47150 on NVD →