PostX vulnerabilities

5 known vulnerabilities in PostX from Wpxpo. 5 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  PostX: Missing Authorization

  CVE-2025-69313Jan 22, 2026Wpxpo

  Missing Authorization vulnerability in WPXPO PostX ultimate-post allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PostX: from n/a through <= 5.0.3.

• 7.2 High severity

  PostX: Incorrect Privilege Assignment

  CVE-2025-55707Dec 18, 2025Wpxpo

  Incorrect Privilege Assignment vulnerability in WPXPO PostX ultimate-post allows Privilege Escalation.This issue affects PostX: from n/a through <= 4.1.35.

• 7.1 High severity

  PostX: Missing Authorization

  CVE-2025-54751Dec 18, 2025Wpxpo

  Missing Authorization vulnerability in WPXPO PostX ultimate-post allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PostX: from n/a through <= 4.1.36.

• 8.8 High severity

  Post Grid Gutenberg Blocks for News…: Missing Authorization

  CVE-2024-10728Nov 16, 2024WpxpoEPSS 39.1%

  The Post Grid Gutenberg Blocks and WordPress Blog Plugin – PostX plugin for WordPress is vulnerable to unauthorized plugin installation/activation due to a missing capability check on the 'install_required_plugin_callback' function in all versions up to, and i

• 8.8 High severity

  PostX: Missing Authorization

  CVE-2024-31246Jun 9, 2024Wpxpo

  Missing Authorization vulnerability in WPXPO PostX ultimate-post allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PostX: from n/a through <= 3.2.3.