VendorswpWaxpost_grid%5C%2C_slider_%5C%26_carousel_ultimateall versions
Vulnerabilities

wpWax Post Grid, Slider & Carousel Ultimate

Ranked by severity, then by exploit likelihood, unless you sort otherwise. Click a CVE ID for its full record.

5CVEs
CVE-2024-2006
Post Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget <= 1.6.7 - Authenticated (Contributor+) PHP Object Injection in outpost_shortcode_metabox_markup
Published 2024-03-13 · Modified
8.8EPSS 0.012
CVE-2024-13409
Post Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget <= 1.6.10 - Authenticated (Contributor+) Local File Inclusion via post_type_ajax_handler()
Published 2025-01-24 · Analyzed
8.8EPSS 0.009
CVE-2025-24782
WordPress Post Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget plugin <= 1.6.10 - Local File Inclusion vulnerability
Published 2025-01-27 · Modified
8.8EPSS 0.005
CVE-2024-29925
WordPress Post Grid, Slider & Carousel Ultimate plugin <= 1.6.6 - Cross Site Scripting (XSS) vulnerability
Published 2024-03-27 · Modified
6.5EPSS 0.003
CVE-2022-1266
Post Grid, Slider & Carousel Ultimate < 1.5.0 - Admin+ Stored XSS
Published 2022-06-20 · Modified
4.8EPSS 0.006