Vulnerabilities in plugin | ww.wp.xz.cn

Resolved jrrsdu
(@jrrsdu)

1 month, 2 weeks ago

According to ManageWP and patchstack there’s two vulnerability (link 1 and link 2) in version 2.3.23 and below of Post Grid.

Is there a new version of the plugin on the way where the vulnerabilities have been resolved?

Viewing 4 replies - 1 through 4 (of 4 total)

Thread Starter jrrsdu
(@jrrsdu)

1 month ago

Any news regarding the vulnerabilities I wrote about a little over a week ago?

Plugin Support hasanrang05
(@hasanrang05)

1 month ago

hi, we do not have access to details issue, we will wait for access to report or they usually send us these issue mail, but last two issue we haven’t received any mail/report, we will wait for ww.wp.xz.cn report mail to fix the issue.

I hope you understand. Regards

tofraser
(@tofraser)

1 month ago

According to Patchstack, these vulnerabilities were reported in November 2025.

https://patchstack.com/database/wordpress/plugin/post-grid/vulnerability/wordpress-post-grid-and-gutenberg-blocks-plugin-2-3-18-cross-site-scripting-xss-vulnerability

https://patchstack.com/database/wordpress/plugin/post-grid/vulnerability/wordpress-post-grid-and-gutenberg-blocks-plugin-2-3-19-insecure-direct-object-references-idor-vulnerability

Plugin Support hasanrang05
(@hasanrang05)

4 weeks, 1 day ago

We have checked the issue and found these issues was related to blocks, all blocks move to our new plugin combo-blocks plugin

we have submitted patched report to wordfence, i hope they will approve.

Viewing 4 replies - 1 through 4 (of 4 total)

You must be logged in to reply to this topic.

6 replies
3 participants
Last reply from: hasanrang05
Last activity: 4 weeks, 1 day ago
Status: resolved