Source evidence

Vulnerabilities Detected

Post Grid · support · 2026-06-29T08:09:00+00:00

Post Grid plugin evidence original source source API

questionsentiment

highseverity

0.8relevance

1replies

Evidence linked to opportunitycommercial context

Proof Health

Open evidence

Commercial opportunities need traceable source links before they are treated as build-worthy.

5 / 18 rows with source links

27.8% of this page's analysis has direct source links.

0 build-decision rows missing links

0 rows here require auditable proof before promotion.

13 rows with no attached evidence

0 rows have source counts but still need direct links.

Conversation

support

lailaworldhostgroup unresolved

Hi team, a recent scan using Kadence Security Pro (powered by PatchStack) detected this plugin as vulnerable. ( https://patchstack.com/database/vulnerability/post-grid/wordpress-post-grid-and-gutenberg-blocks-plugin-2-3-18-cross-site-scripting-xss-vulnerability?_a_id=431 ) – WordPress Post Grid and Gutenberg Blocks plugin <= 2.3.23 – Insecure Direct Object References (IDOR) vulnerability – WordPress Post Grid and Gutenberg Blocks plugin <= 2.3.23 – Cross Site Scripting (XSS) vulnerability From this last thread: https://wordpress.org/support/topic/vulnerabilities-in-plugin-3/ seems that you guys have submitted the patch to PatchStack 2 months ago. Has it been accepted and could you confirm if the vulnerabilities have been fully addressed? Thank you Thank you for your report, it seems we already fixed the issue, we have sent an email to patchstack about this issue, waiting for reply. Regards

Commercial Context

Opportunity

content publishing operations

Post Grid publishing workflow assurance for keeping publishing, media, and editorial handoffs consistent

Buyer: publishers, content teams, and agencies

Wedge: check post grid publishing, media, metadata, and editorial handoffs before content goes live

Proof Blocked card complete market

Analysis

codex:gpt-5.5

Summary: A user asks whether reported Post Grid IDOR and XSS vulnerabilities are fully fixed after PatchStack still detects the plugin as vulnerable.

Evidence quote: detected this plugin as vulnerable

Affected feature: Post Grid vulnerabilities

security Post Grid vulnerabilities

Plugin

API

Post Grid

30.0K active installs · 3.5M downloads · rating 86.0

post filter post grid post masonry posts carousel posts slider

Comments

1 shown

hasanrang05 2026-07-03T04:06:00+00:00

Thank you for your report, it seems we already fixed the issue, we have sent an email to patchstack about this issue, waiting for reply. Regards