Vulnerability alerts / October 26, 2026

Vulnerability in Advanced Post Block – Display Your Posts Exactly How You Want — CVE-2026-115955

MediumSeverity
CVSS 6.5

—Estimated exploit probability
EPSS

10,000+ sitesInstalls

2.5.2Fixed in

What to do now

Update Advanced Post Block – Display Your Posts Exactly How You Want to 2.5.2 or later.

Affected versions

Everything up to and including 2.5.1

Affected: Advanced Post Block – Display Your Posts Exactly How You Want (plugin, advanced-post-block)

Check: The plugin on wordpress.org / Our record for Advanced Post Block – Display Your Posts Exactly How You Want

What the vulnerability is

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Advanced Post Block - Post Grid for WordPress block editor advanced-post-block allows Stored XSS.This issue affects Advanced Post Block - Post Grid for WordPress block editor: from n/a through 2.5.1.

This description is reproduced verbatim from the public vulnerability record.

Sources

https://patchstack.com/database/wordpress/plugin/advanced-post-block/vulnerability/wordpress-advanced-post-block-post-grid-for-wordpress-block-editor-plugin-2-5-1-cross-site-scripting-xss-vulnerability?_s_id=cve

This page is compiled automatically from public databases. Accuracy is not guaranteed; confirm against the vendor advisory before acting.

See other alerts