WP Vulnerability WatchVulnerability data as of September 7, 2026

Known vulnerabilities in Post Grid

Post Grid is a powerful WordPress plugin for creating customizable post grid layouts with advanced query options, allowing users to display posts dyna …

32Reported vulnerabilities
9.8Highest CVSS score
2.3.24Latest version
30,000+Active installs

What to do now

Update Post Grid to 2.3.33 or later. 30 of these have a fixed version available. Updating resolves them.

Plugin last updated: July 19, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVESeverityExploit probability
next 30 days		 Affected versionsFixed inPublished
CVE-2024-0881 Medium 5.4 16.9% Before 2.2.76 2.2.76 April 11, 2024
CVE-2021-24488 Medium 6.1 11.2% Before 2.1.8 2.1.8 August 2, 2021
CVE-2020-35939 High 8.8 2.1% Before 2.0.73
Before 1.22.16		 2.0.73 January 1, 2021
CVE-2020-35938 High 8.8 2.1% Before 2.0.73
Before 1.22.16		 2.0.73 January 1, 2021
CVE-2024-8253 High 8.8 9.4% 2.2.87 up to (but not including) 2.2.91 2.2.91 September 11, 2024
CVE-2020-35937 High 8 1.7% Before 2.0.73
Before 1.22.16		 2.0.73 January 1, 2021
CVE-2020-35936 High 8 1.7% Before 2.0.73
Before 1.22.16		 2.0.73 January 1, 2021
CVE-2022-0447 Medium 6.4 0.6% Before 2.1.16 2.1.16 April 11, 2022
CVE-2021-24986 Medium 6.1 0.8% Before 2.1.16 2.1.16 April 11, 2022
CVE-2024-9636 Critical 9.8 0.8% 2.2.85 to 2.3.3 (inclusive) 2.3.4 January 15, 2025
CVE-2024-11080 Critical 9.8 0.4% 2.2.85 to 2.3.32 (inclusive) 2.3.33 September 5, 2026
CVE-2024-9645 Medium 5.4 0.3% Before 2.2.93 2.2.93 May 15, 2025
WF-f28ca2dc-404d-4abf-9d44-1b1f8309e9ee Critical 9.1 — 2.0.12 and earlier 2.0.13 November 8, 2016
CVE-2025-54007 High 8.8 0.4% 2.3.11 and earlier 2.3.12 August 6, 2025
CVE-2021-4450 High 8.8 0.5% 2.1.12 and earlier 2.1.13 October 16, 2024
CVE-2023-40211 High 7.5 2.2% 2.2.50 and earlier 2.2.51 August 11, 2023
CVE-2023-7072 High 7.5 0.6% Before 2.2.69 2.2.69 March 12, 2024
CVE-2024-13796 High 7.5 0.4% Before 2.3.7 2.3.7 February 28, 2025
CVE-2024-50432 Medium 6.4 0.3% 2.2.93 and earlier 2.2.94 October 24, 2024
CVE-2024-47340 Medium 6.4 0.3% 2.2.89 and earlier 2.2.90 September 27, 2024
CVE-2024-7588 Medium 6.4 0.3% 0 to 2.2.84 (inclusive)
0 to 2.2.84 (inclusive)		 2.2.88 August 14, 2024
CVE-2024-43155 Medium 6.4 0.3% 2.2.86 and earlier 2.2.87 August 7, 2024
CVE-2024-3155 Medium 6.4 0.3% 2.2.80 and earlier 2.2.81 May 20, 2024
CVE-2025-68605 Medium 6.4 0.2% 2.3.21 and earlier — December 21, 2025
CVE-2024-30441 Medium 6.1 0.4% 2.2.74 and earlier 2.2.76 March 28, 2024
CVE-2024-6346 Medium 5.4 0.3% Before 2.2.86 2.2.86 August 1, 2024
CVE-2024-4042 Medium 5.4 0.3% Before 2.2.81 2.2.81 June 7, 2024
CVE-2024-1988 Medium 5.4 0.3% Before 2.2.81 2.2.81 June 7, 2024
CVE-2024-32816 Medium 5.3 0.7% 2.2.78 and earlier 2.2.79 April 22, 2024
CVE-2025-63043 Medium 5.3 0.2% 2.3.19 and earlier — December 3, 2025
CVE-2025-62924 Medium 4.3 0.3% 2.3.17 and earlier 2.3.18 October 4, 2025
CVE-2025-66058 Medium 4.3 0.2% 2.3.17 and earlier 2.3.18 October 4, 2025

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.