Post Grid

Every one of the 18 is a mark on the map. Named now: 1 to 18, most at risk first.

1. WordPress Post Grid <2.1.8 - Cross-Site ScriptingCVE-2021-24488Pickplugins · 11% likely

   CWE-79

2. PHP Object injection vulnerabilities in the Post Grid plugin before 2.0.73 for WordPress allow remote authenticated attackers to inject arbitrary PHP objects due to insecure unser…CVE-2020-35938Pickplugins · CVSS 7.5 · 2.1% likely

   CWE-502

3. Stored Cross-Site Scripting (XSS) vulnerabilities in the Post Grid plugin before 2.0.73 for WordPress allow remote authenticated attackers to import layouts including JavaScript s…CVE-2020-35936Pickplugins · CVSS 7.5 · 1.7% likely

   CWE-79

4. Post Grid and Gutenberg Blocks – ComboBlocks 2.2.85 - 2.3.32 - Unauthenticated Hook InjectionCVE-2024-11080pickplugins · CVSS 9.8 · 0.8% likely

   CWE-94

5. Post Grid < 2.1.16 - Reflected Cross-Site Scripting via keywordCVE-2021-24986Pickplugins · 0.8% likely

   CWE-79

6. WordPress Combo Blocks plugin <= 2.2.78 - Sensitive Data Exposure via API vulnerabilityCVE-2024-32816PickPlugins · CVSS 7.5 · 0.7% likely

   CWE-200

7. Post Grid < 2.1.16 - Reflected Cross-Site Scripting via post_typesCVE-2022-0447Pickplugins · 0.6% likely

   CWE-79

8. Post Grid Combo – 36+ Gutenberg Blocks <= 2.2.68 - Information Exposure via get_posts API EndpointCVE-2023-7072pickplugins · CVSS 7.5 · 0.6% likely

   CWE-202

9. Post Grid <= 2.1.12 - Contributor+ SQL InjectionCVE-2021-4450pickplugins · CVSS 8.8 · 0.5% likely

   CWE-89

10. Post Grid and Gutenberg Blocks – ComboBlocks <= 2.3.6 - Unauthenticated User Information ExposureCVE-2024-13796pickplugins · CVSS 5.3 · 0.4% likely

    CWE-200

11. WordPress Combo Blocks plugin <= 2.2.74 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2024-30441PickPlugins · CVSS 7.1 · 0.4% likely

    CWE-79

12. Post Grid Combo – 36+ Gutenberg Blocks <= 2.2.64 - Authenticated (Contributor+) Cross-Site ScriptingCVE-2023-6645pickplugins · CVSS 6.4 · 0.3% likely

    CWE-79

13. Post Grid and Gutenberg Blocks – ComboBlocks <= 2.3.5 - Unauthenticated Paid Order CreationCVE-2024-13798pickplugins · CVSS 5.3 · 0.3% likely

    CWE-20

14. Gutenberg Blocks, Page Builder – ComboBlocks <= 2.2.87 - Authenticated (Contributor+) Stored Cross-Site Scripting via Accordion BlockCVE-2024-7588pickplugins · CVSS 6.4 · 0.3% likely

    CWE-79

15. Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel – Combo Blocks <= 2.2.85 - Authenticated (Contributor+) Stored Cross-Site Scripting via redirect…CVE-2024-6346pickplugins · CVSS 6.4 · 0.3% likely

    CWE-79

16. Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel – Combo Blocks <= 2.2.80 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-3155pickplugins · CVSS 6.4 · 0.3% likely

    CWE-79

17. Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel - Combo Blocks <= 2.2.80 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block At…CVE-2024-4042pickplugins · CVSS 6.4 · 0.3% likely

    CWE-79

18. Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel – Combo Blocks <= 2.2.80 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-1988pickplugins · CVSS 6.4 · 0.3% likely

    CWE-79

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.