Unknown Post Grid, Slider & Carousel Ultimate vulnerabilities
2 vulnerabilities
Known vulnerabilities in Unknown Post Grid, Slider & Carousel Ultimate, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
MediumCVE-2022-1266unknown · post grid, slider & carousel ultimate +2 morePost Grid, Slider & Carousel Ultimate < 1.5.0 - Admin+ Stored XSSThe Post Grid, Slider & Carousel Ultimate WordPress plugin before 1.5.0 does not sanitise and escape the Header Title, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.EPSS0.59%MediumCVE-2026-16260unknown · post grid, slider & carousel ultimate +1 morePost Grid, Slider & Carousel Ultimate < 1.8.1 - Contributor+ Stored XSS via Header Title FieldThe Post Grid, Slider & Carousel Ultimate WordPress plugin before 1.8.1 does not sanitise and escape one of its custom post type settings before outputting it in an HTML attribute on the admin edit screen, allowing users with the Contributor role and above to inject JavaScript that executes in the session of any administrator who opens the affected item.EPSS0.43%