CVE-2024-11080Post Grid and Gutenberg Blocks – ComboBlocks 2.2.85 - 2.3.32 - Unauthenticated Hook Injection Exploitation status Not known exploited Fix Affected product P Post Grid Published 09/05/2026 Severity Critical CVE-2026-10207PickPlugins Question Answer <= 1.2.73 - Unauthenticated SQL Injection via 'id' Parameter Exploitation status Not known exploited Fix Affected product P PickPlugins Question Answer Published 07/28/2026 Severity High CVE-2026-65456WordPress Product Slider for WooCommerce plugin <= 1.13.62 - Insecure Direct Object References (IDOR) vulnerability Exploitation status Not known exploited Fix Affected product P Product Slider for WooCommerce Published 07/23/2026 Severity Medium CVE-2026-10862Accordions <= 2.3.23 - Authenticated (Custom+) Stored Cross-Site Scripting via Accordion Body Field Exploitation status Not known exploited Fix Affected product A Accordions Published 06/09/2026 Severity Medium CVE-2025-62745WordPress Team Showcase plugin <= 1.22.28 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product T Team Showcase Published 05/25/2026 Severity Medium CVE-2026-7458User Verification by PickPlugins <= 2.0.46 - Unauthenticated Authentication Bypass via OTP Verification REST API Endpoint Exploitation status Not known exploited Fix Affected product U User Verification by PickPlugins Published 05/02/2026 Severity Critical CVE-2026-32497WordPress User Verification plugin <= 2.0.45 - Email Verification Bypass vulnerability Exploitation status Not known exploited Fix Affected product U User Verification Published 03/25/2026 Severity Medium CVE-2026-25455WordPress Product Slider for WooCommerce plugin <= 1.13.61 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product P Product Slider for WooCommerce Published 03/25/2026 Severity Medium CVE-2025-68000WordPress Testimonial Slider plugin <= 2.0.15 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product T Testimonial Slider Published 02/20/2026 Severity Medium CVE-2025-68605WordPress Post Grid and Gutenberg Blocks plugin <= 2.3.23 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product P Post Grid and Gutenberg Blocks Published 12/24/2025 Severity Medium CVE-2025-63043WordPress Post Grid and Gutenberg Blocks plugin <= 2.3.23 - Insecure Direct Object References (IDOR) vulnerability Exploitation status Not known exploited Fix Affected product P Post Grid and Gutenberg Blocks Published 12/18/2025 Severity Medium CVE-2025-66058WordPress Post Grid and Gutenberg Blocks plugin <= 2.3.17 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product P Post Grid and Gutenberg Blocks Published 12/18/2025 Severity Medium CVE-2025-12374Email Verification, Email OTP, Block Spam Email, Passwordless login, Hide Login, Magic Login – User Verification <= 2.0.44 - Authentication Bypass to Account Takeover Exploitation status Not known exploited Fix Affected product U User Verification by PickPlugins Published 12/05/2025 Severity Critical CVE-2025-62929WordPress Testimonial Slider plugin <= 2.0.15 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product T Testimonial Slider Published 10/27/2025 Severity Medium CVE-2025-62924WordPress Post Grid and Gutenberg Blocks plugin <= 2.3.17 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product P Post Grid and Gutenberg Blocks Published 10/27/2025 Severity Medium CVE-2025-53421WordPress Accordion plugin <= 2.3.14 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product A Accordion Published 10/22/2025 Severity Medium CVE-2025-60162WordPress Job Board Manager Plugin <= 2.1.61 - Cross Site Scripting (XSS) Vulnerability Exploitation status Not known exploited Fix Affected product J Job Board Manager Published 09/26/2025 Severity Medium CVE-2025-58678WordPress Accordion Plugin <= 2.3.15 - Broken Access Control Vulnerability Exploitation status Not known exploited Fix Affected product A Accordion Published 09/22/2025 Severity Medium CVE-2025-58827WordPress Job Board Manager Plugin <= 2.1.61 - Content Injection Vulnerability Exploitation status Not known exploited Fix Affected product J Job Board Manager Published 09/05/2025 Severity Low CVE-2025-54007WordPress Post Grid and Gutenberg Blocks Plugin <= 2.3.11 - PHP Object Injection Vulnerability Exploitation status Not known exploited Fix Affected product P Post Grid and Gutenberg Blocks Published 08/20/2025 Severity High CVE-2025-49324WordPress Job Board Manager plugin <= 2.1.60 - Broken Access Control Vulnerability Exploitation status Not known exploited Fix Affected product J Job Board Manager Published 06/06/2025 Severity Medium CVE-2025-49075WordPress Wishlist plugin <= 1.0.43 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product W Wishlist Published 06/06/2025 Severity Medium CVE-2024-9645Post Grid and Gutenberg Blocks < 2.2.93 - Contributor+ Stored XSS Exploitation status Public exploit Fix Affected product P Post Grid, Posts Slider, Posts Carousel, Post Filter, Post Masonry Published 05/15/2025 Severity Medium CVE-2025-24655WordPress Wishlist Plugin <= 1.0.39 - Reflected Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product W Wishlist Published 04/17/2025 Severity High CVE-2025-32646WordPress Question Answer plugin <= 1.2.70 - Reflected Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product Q Question Answer Published 04/17/2025 Severity High CVE-2025-32647WordPress Question Answer plugin <= 1.2.73 - PHP Object Injection vulnerability Exploitation status Not known exploited Fix Affected product Q Question Answer Published 04/17/2025 Severity High CVE-2025-32618WordPress Wishlist plugin <= 1.0.46 - SQL Injection vulnerability Exploitation status Not known exploited Fix Affected product W Wishlist Published 04/11/2025 Severity High CVE-2025-32144WordPress Job Board Manager Plugin <= 2.1.61 - PHP Object Injection vulnerability Exploitation status Not known exploited Fix Affected product J Job Board Manager Published 04/11/2025 Severity High CVE-2025-32143WordPress Accordion plugin <= 2.3.11 - PHP Object Injection vulnerability Exploitation status Not known exploited Fix Affected product A Accordion Published 04/11/2025 Severity High CVE-2025-32272WordPress Wishlist plugin <= 1.0.46 - Cross Site Request Forgery (CSRF) vulnerability Exploitation status Not known exploited Fix Affected product W Wishlist Published 04/04/2025 Severity Medium CVE-2025-30889WordPress Testimonial Slider plugin <= 2.0.13 - PHP Object Injection vulnerability Exploitation status Not known exploited Fix Affected product T Testimonial Slider Published 04/03/2025 Severity High CVE-2025-31862WordPress Job Board Manager Plugin <= 2.1.61 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product J Job Board Manager Published 04/01/2025 Severity Medium CVE-2025-31810WordPress Question Answer plugin <= 1.2.73 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product Q Question Answer Published 04/01/2025 Severity Medium CVE-2024-12634Related Posts, Inline Related Posts, Contextual Related Posts, Related Content By PickPlugins <= 2.0.59 - Cross-Site Request Forgery to Stored Cross-Site Scripting Exploitation status Not known exploited Fix Not confirmed Affected product R Related Posts, Inline Related Posts, Contextual Related Posts, Related Content By PickPlugins Published 03/07/2025 Severity Medium CVE-2024-12809Wishlist <= 1.0.43 - Authenticated (Contributor+) Stored Cross-Site Scripting Exploitation status Not known exploited Fix Affected product W Wishlist Published 03/07/2025 Severity Medium CVE-2024-13469Pricing Table by PickPlugins <= 1.12.10 - Authenticated (Contributor+) Stored Cross-Site Scripting Exploitation status Not known exploited Fix Affected product P PickPlugins Pricing Table Published 02/28/2025 Severity Medium CVE-2024-13796Post Grid and Gutenberg Blocks – ComboBlocks <= 2.3.6 - Unauthenticated User Information Exposure Exploitation status Not known exploited Fix Affected product P Post Grid Published 02/28/2025 Severity Medium CVE-2025-26915WordPress Wishlist Plugin <= 1.0.41 - SQL Injection vulnerability Exploitation status Not known exploited Fix Affected product W Wishlist Published 02/25/2025 Severity High CVE-2024-13798Post Grid and Gutenberg Blocks – ComboBlocks <= 2.3.5 - Unauthenticated Paid Order Creation Exploitation status Not known exploited Fix Affected product P Post Grid Published 02/22/2025 Severity Medium CVE-2025-22679WordPress Job Board Manager Plugin <= 2.1.61 - Reflected Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product J Job Board Manager Published 02/03/2025 Severity High CVE-2025-24622WordPress Job Board Manager plugin <= 2.1.59 - Cross Site Request Forgery (CSRF) vulnerability Exploitation status Not known exploited Fix Affected product J Job Board Manager Published 01/24/2025 Severity Medium CVE-2024-13408Post Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget <= 1.6.10 - Authenticated (Contributor+) Local File Inclusion Exploitation status Not known exploited Fix Affected product P Post Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget Published 01/24/2025 Severity High CVE-2024-9636Post Grid and Gutenberg Blocks 2.2.85 - 2.3.3 - Unauthenticated Privilege Escalation Exploitation status Not known exploited Fix Affected product P Post Grid and Gutenberg Blocks – ComboBlocks Published 01/15/2025 Severity Critical CVE-2024-55993WordPress Job Board Manager plugin <= 2.1.61 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product J Job Board Manager Published 12/16/2024 Severity Medium CVE-2024-54273WordPress Mail Picker plugin <= 1.0.14 - PHP Object Injection vulnerability Exploitation status Not known exploited Fix Affected product M Mail Picker Published 12/13/2024 Severity Critical CVE-2024-10937Related Posts, Inline Related Posts, Contextual Related Posts, Related Content By PickPlugins <= 2.0.58 - Sensitive Information Exposure Exploitation status Not known exploited Fix Affected product R Related Posts By PickPlugins Published 12/05/2024 Severity Medium CVE-2024-53772WordPress Mail Picker plugin <= 1.0.15 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product M Mail Picker Published 11/30/2024 Severity Medium CVE-2024-9111Product Designer <= 1.0.36 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload Exploitation status Not known exploited Fix Affected product P PickPlugins Product Designer for WooCommerce Published 11/21/2024 Severity Medium CVE-2024-38726WordPress Product Designer plugin <= 1.0.33 - Arbitrary Content Deletion vulnerability Exploitation status Not known exploited Fix Affected product P Product Designer Published 11/01/2024 Severity High CVE-2024-50432WordPress Post Grid and Gutenberg Blocks plugin <= 2.2.93 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product P Post Grid and Gutenberg Blocks Published 10/28/2024 Severity Medium CVE-2021-4450Post Grid <= 2.1.12 - Contributor+ SQL Injection Exploitation status Not known exploited Fix Affected product P Post Grid Published 10/16/2024 Severity High CVE-2024-47340WordPress ComboBlocks plugin <= 2.2.89 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product P Post Grid and Gutenberg Blocks Published 10/06/2024 Severity Medium CVE-2024-47342WordPress Accordion plugin <= 2.2.99 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product A Accordion Published 10/06/2024 Severity Medium CVE-2024-44002WordPress Team Showcase plugin <= 1.22.25 - Reflected Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product T Team Showcase Published 09/17/2024 Severity High CVE-2024-45459WordPress Product Slider for WooCommerce by PickPlugins plugin <= 1.13.50 - Reflected Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product P Product Slider for WooCommerce Published 09/15/2024 Severity High CVE-2024-8253Post Grid and Gutenberg Blocks 2.2.87 - 2.2.90 - Authenticated (Subscriber+) Privilege Escalation Exploitation status Not known exploited Fix Affected product P Post Grid and Gutenberg Blocks Published 09/11/2024 Severity High CVE-2024-43321WordPress Team Showcase plugin <= 1.22.23 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product T Team Showcase Published 08/18/2024 Severity Medium CVE-2024-7588Gutenberg Blocks, Page Builder – ComboBlocks <= 2.2.87 - Authenticated (Contributor+) Stored Cross-Site Scripting via Accordion Block Exploitation status Not known exploited Fix Affected product P Post Grid Published 08/14/2024 Severity Medium CVE-2024-43155WordPress ComboBlocks plugin <= 2.2.86 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product C ComboBlocks Published 08/12/2024 Severity Medium CVE-2024-6346Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel – Combo Blocks <= 2.2.85 - Authenticated (Contributor+) Stored Cross-Site Scripting via redirectURL Parameter of Date Countdown Widget Exploitation status Not known exploited Fix Affected product P Post Grid Published 08/01/2024 Severity Medium CVE-2024-38722WordPress Job Board Manager plugin <= 2.1.57 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product J Job Board Manager Published 07/20/2024 Severity Medium CVE-2024-3608Product Designer <= 1.0.33 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion Exploitation status Not known exploited Fix Affected product P PickPlugins Product Designer for WooCommerce Published 07/09/2024 Severity Medium CVE-2024-4042Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel - Combo Blocks <= 2.2.80 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block Attribute Exploitation status Not known exploited Fix Affected product P Post Grid Published 06/07/2024 Severity Medium CVE-2024-1988Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel – Combo Blocks <= 2.2.80 - Authenticated (Contributor+) Stored Cross-Site Scripting Exploitation status Not known exploited Fix Affected product P Post Grid Published 06/07/2024 Severity Medium CVE-2023-40557WordPress Tabs & Accordion plugin <= 1.3.10 - Content Injection vulnerability Exploitation status Not known exploited Fix Affected product T Tabs & Accordion Published 06/04/2024 Severity Medium CVE-2024-3155Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel – Combo Blocks <= 2.2.80 - Authenticated (Contributor+) Stored Cross-Site Scripting Exploitation status Not known exploited Fix Affected product P Post Grid Published 05/21/2024 Severity Medium CVE-2024-32816WordPress Combo Blocks plugin <= 2.2.78 - Sensitive Data Exposure via API vulnerability Exploitation status Not known exploited Fix Affected product P Post Grid Published 04/24/2024 Severity High CVE-2024-0881Combo Blocks < 2.2.76 - Unauthenticated Password Protected Posts Access Exploitation status Public exploit Fix Affected product P Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel Published 04/11/2024 Severity Medium CVE-2024-1641Accordion <= 2.2.96 - Missing Authorization to Authenticated(Contributor+) Post Duplication Exploitation status Not known exploited Fix Affected product A Accordions Published 04/09/2024 Severity Medium CVE-2024-31277WordPress Product Designer plugin <= 1.0.32 - PHP Object Injection vulnerability Exploitation status Public exploit Fix Affected product P Product Designer Published 04/07/2024 Severity High CVE-2024-30441WordPress Combo Blocks plugin <= 2.2.74 - Reflected Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product P Post Grid Published 03/29/2024 Severity High CVE-2024-29097WordPress User profile plugin <= 2.0.20 - Subscriber+ Stored Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product U User profile Published 03/19/2024 Severity Medium CVE-2023-7072Post Grid Combo – 36+ Gutenberg Blocks <= 2.2.68 - Information Exposure via get_posts API Endpoint Exploitation status Not known exploited Fix Affected product P Post Grid Published 03/12/2024 Severity High CVE-2023-51666WordPress Related Post Plugin <= 2.0.53 is vulnerable to Cross Site Scripting (XSS) Exploitation status Not known exploited Fix Affected product R Related Post Published 02/01/2024 Severity Medium CVE-2023-6645Post Grid Combo – 36+ Gutenberg Blocks <= 2.2.64 - Authenticated (Contributor+) Cross-Site Scripting Exploitation status Not known exploited Fix Affected product P Post Grid Published 01/11/2024 Severity Medium CVE-2023-40211WordPress Post Grid Plugin <= 2.2.50 is vulnerable to Sensitive Data Exposure Exploitation status Not confirmed Fix Affected product P Post Grid Combo – 36+ Gutenberg Blocks Published 11/30/2023 Severity High CVE-2023-0166PickPlugins Product Slider for WooCommerce < 1.13.42 - Contributor+ Stored XSS Exploitation status Public exploit Fix Affected product P Product Slider for WooCommerce by PickPlugins Published 02/13/2023 Severity Medium CVE-2022-4836Breadcrumb < 1.5.33 - Contributor+ Stored XSS via Shortcode Exploitation status Public exploit Fix Affected product B Breadcrumb Published 02/06/2023 Severity Medium CVE-2022-4693User Verification < 1.0.94 - Authentication Bypass Exploitation status Public exploit Fix Affected product U User Verification Published 01/23/2023 Severity Critical CVE-2022-0447Post Grid < 2.1.16 - Reflected Cross-Site Scripting via post_types Exploitation status Not confirmed Fix Affected product P Post Grid Published 04/11/2022 Severity Unknown CVE-2021-24986Post Grid < 2.1.16 - Reflected Cross-Site Scripting via keyword Exploitation status Not confirmed Fix Affected product P Post Grid Published 04/11/2022 Severity Unknown CVE-2021-24488Post Grid < 2.1.8 - Reflected Cross-Site Scripting (XSS) Exploitation status Not confirmed Fix Affected product P Post Grid Published 08/02/2021 Severity Unknown CVE-2021-24300PickPlugins Product Slider for WooCommerce < 1.13.22 - Reflected Cross-Site Scripting (XSS) Exploitation status Not confirmed Fix Affected product P PickPlugins Product Slider for WooCommerce Published 05/24/2021 Severity Unknown CVE-2021-24283Accordion < 2.2.30 - Authenticated Reflected Cross-Site Scripting (XSS) Exploitation status Not confirmed Fix Affected product A Accordion Published 05/14/2021 Severity Unknown CVE-2020-35939Exploitation status Not confirmed Fix Not confirmed Affected product Not confirmed Published 01/01/2021 Severity High CVE-2020-35938Exploitation status Not confirmed Fix Not confirmed Affected product Not confirmed Published 01/01/2021 Severity High CVE-2020-35937Exploitation status Not confirmed Fix Not confirmed Affected product Not confirmed Published 01/01/2021 Severity High CVE-2020-35936Exploitation status Not confirmed Fix Not confirmed Affected product Not confirmed Published 01/01/2021 Severity High CVE-2020-13644Exploitation status Not confirmed Fix Not confirmed Affected product Not confirmed Published 05/28/2020 Severity Medium 
