WP Ultimate Post Grid
WP Ultimate Post Grid has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2024; all 2 are fixed as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10. 2024 was the busiest year with 2 disclosures.
The most common weakness is Cross-Site Scripting, behind 2 of the records (100%).
Every one of the 2 issues recorded for WP Ultimate Post Grid has a vendor fix available, so running the current release closes all known holes.
2 independent researchers contributed these findings, one record each. WP Ultimate Post Grid is installed on roughly 4,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.
CVE-2024-9051WP Ultimate Post Grid <= 3.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpupg-grid-with-filters Shortcode
Read the full analysisVulnerability Records

WP Ultimate Post Grid
Author
Brecht
Use WP Ultimate Post Grid to create responsive grids for your posts, pages or any custom post type. Optionally add an isotope filter for any taxonomy associated with those posts. See this plugin in action! Check out demos of our grids and all of the plugin documentation to learn more. An overview of the WP Ultimate Post Grid features: Live Preview while building your grid Use posts, pages or custom post types as the source Grids are responsive and will look good on any device Ability to set order by options Link to the actual post or featured image Define custom links for posts Define custom images for posts Add an isotope filter for any taxonomy or custom field Deeplinking directly to a filtered grid Grids and filters can be added anywhere with their own shortcode Multiple templates for your grids Extensive Template Editor to create any grid you want Possibility to use pagination Compatible with both Classic Editor and Gutenberg Block Editor Fully integrated with our WP Recipe Maker plugin for a recipe grid We also have a WP Ultimate Post Grid Premium version which offers the following features: Limit your posts by any taxonomy, author, date or post ID Use a plain text filter for your grid Have dropdown filters for any taxonomy Use a checkbox filter for any taxonomy Allow for multiselect in the filters Show the post count for the filter terms Create a grid of your categories or tags A Load More button for pagination Load on filter pagination Infinite scroll pagination Easily clone your grids Order grid by custom field Dynamically filter grids in the shortcode This plugin is under active development. Any feature requests are welcome!
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C