WP Clinic
Log in Sign up

CVE

CVE-2025-66058 — Post Grid [post-grid] < 2.3.18

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2025-66058 Post Grid [post-grid] < 2.3.18 Missing Authorization Unknown < 2.3.18 2.3.18 2025-10-04

CVE-2025-66058

The Post Grid plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 2.3.17. This makes it possible for authenticated attackers, with Subscriber-level access and above, to perform an unauthorized action.

Source: Wordfence

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.