Post Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget vulnerabilities
3 known vulnerabilities in Post Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget from wpWax. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.8 High severity
Post Grid, Slider & Carousel Ultimate – with…: Improper Limitation of a Pathname to a Restricted Directory
The Post Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.6.10 via the 'theme' parameter of the post_type_ajax_handler() fun
- 8.8 High severity
Post Grid, Slider & Carousel Ultimate – with…: Improper Control of Filename for Include/Require Statement in PHP Program
The Post Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.6.10 via the 'theme' attribute of the `pgcu` shortcode. This makes
- 8.8 High severity
Post Grid, Slider & Carousel Ultimate – with…: Deserialization of Untrusted Data
The Post Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.6.7 via deserialization of untrusted input in the outpost_shortcod