CVE · Medium

CVE-2026-49054 — The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid [the-post-grid] < 7.9.3

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2026-49054 The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid [the-post-grid] < 7.9.3 Missing Authorization Medium 4.3 < 7.9.3 7.9.3 2025-03-27

CVE-2026-49054

The Post Grid plugin for WordPress contains a security flaw that allows users with contributor-level permissions or higher to bypass intended access controls on certain functions in versions prior to 8.0.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.