CVE-2025-68605
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk4th percentile - higher than 4% of all known CVEs
Summary
The Post Grid and Gutenberg Blocks plugin up to version 2.3.23 contains a Stored Cross-site Scripting (XSS) vulnerability that allows an attacker to inject a persistent script into the website.
Risk Assessment
An attacker can inject a malicious script that will execute in users' browsers, potentially leading to session theft, account takeover, or malware distribution.
Recommendation
Update the Post Grid and Gutenberg Blocks plugin to the latest version that includes a fix for the XSS vulnerability.
Other vulnerabilities in Post Grid and Gutenberg Blocks
Original NVD description (English source)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PickPlugins Post Grid and Gutenberg Blocks post-grid allows Stored XSS.This issue affects Post Grid and Gutenberg Blocks: from n/a through <= 2.3.23.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS