PLUGIN SECURITY
Is The Post Grid safe?
Display WordPress posts in beautiful grid, list, slider, and filter layouts. Works with Gutenberg, Elementor, Divi, and Shortcodes.
What this plugin does
- Slug:
the-post-grid - Author: RadiusTheme
- 100000+ active installs
- 96/100 rating (265 reviews on wordpress.org)
- 3504343 all-time downloads
- On WordPress.org since 2016-03-02
content gridpost displaypost gridpost grid elementor addonpost slider
Maintenance status
- Latest known version: 7.9.3
- Last updated: 2026-08-24 4:54am GMT
- Tested up to WordPress: 7.1
- Requires PHP: 7.4+
- Max supported PHP (analyzed): 8.4
Known vulnerabilities
12 known CVEs on file for The Post Grid. Reported between 2023 and 2025.
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2025-30814 | The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid [the-post-grid] < 7.7.18 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') | High 7.5 | < 7.7.18 | 7.7.18 | 2025-03-27 | ✓ fixed in latest |
| CVE-2026-49054 | The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid [the-post-grid] < 7.9.3 | Missing Authorization | Medium 4.3 | < 7.9.3 | 7.9.3 | 2025-03-27 | ✓ fixed in latest |
| CVE-2024-3635 | The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid [the-post-grid] < 7.5.0 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 4.8 | < 7.5.0 | 7.5.0 | 2024-09-09 | ✓ fixed in latest |
| CVE-2024-7418 | The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid [the-post-grid] < 7.7.12 | Exposure of Sensitive Information to an Unauthorized Actor | Medium 4.3 | < 7.7.12 | 7.7.12 | 2024-08-28 | ✓ fixed in latest |
| CVE-2024-37483 | The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid [the-post-grid] < 7.7.5 | Missing Authorization | Medium 5.4 | < 7.7.5 | 7.7.5 | 2024-07-04 | ✓ fixed in latest |
| CVE-2024-37481 | The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid [the-post-grid] < 7.7.5 | Missing Authorization | Medium 6.5 | < 7.7.5 | 7.7.5 | 2024-07-04 | ✓ fixed in latest |
| CVE-2024-37482 | The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid [the-post-grid] < 7.7.5 | Missing Authorization | Medium 4.3 | < 7.7.5 | 7.7.5 | 2024-07-04 | ✓ fixed in latest |
| CVE-2024-1427 | The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid [the-post-grid] < 7.7.2 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 5.4 | < 7.7.2 | 7.7.2 | 2024-07-01 | ✓ fixed in latest |
+ 4 more known vulnerabilities
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2024-35739 | The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid [the-post-grid] < 7.7.2 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.5 | < 7.7.2 | 7.7.2 | 2024-06-06 | ✓ fixed in latest |
| CVE-2024-3936 | The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid [the-post-grid] < 7.7.0 | Missing Authorization | Medium 4.3 | < 7.7.0 | 7.7.0 | 2024-04-30 | ✓ fixed in latest |
| CVE-2023-39923 | The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid [the-post-grid] < 7.2.8 | Cross-Site Request Forgery (CSRF) | Medium 5.4 | < 7.2.8 | 7.2.8 | 2023-08-07 | ✓ fixed in latest |
| CVE-2022-46853 | The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid [the-post-grid] < 5.0.5 | Cross-Site Request Forgery (CSRF) | Medium 4.3 | < 5.0.5 | 5.0.5 | 2023-02-20 | ✓ fixed in latest |
How to fix it
Keep The Post Grid updated — 7.9.3 is the latest version on wordpress.org, and each CVE above lists the exact release that fixed it ("Fixed in").
This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.
Safer / more established alternatives
- Magical Posts Display – Elementor Advanced Posts widgets — 3000+ active installs — 88/100 (10)
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.