CVE-2026-49054
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk11th percentile - higher than 11% of all known CVEs
Summary
The Post Grid plugin by Mamunur Rashid contains a missing authorization vulnerability that allows exploitation of incorrectly configured access control security levels. This issue affects The Post Grid from n/a through 7.9.2.
Risk Assessment
An attacker could exploit misconfigured permissions to perform unauthorized operations on the WordPress site, potentially leading to content modification or data disclosure.
Recommendation
Update The Post Grid plugin to a version later than 7.9.2 and review user permission configuration on the site.
Other vulnerabilities in The Post Grid
See all- CVE-2026-56056Medium
The Post Grid plugin for WordPress by Mamunur Rashid contains a Stored XSS vulnerability due to improper neutralization of input during web page generation. The issue affects versions through 7.9.7.
- CVE-2026-94680Medium
The Post Grid plugin in versions up to and including 7.9.5 contains a Cross Site Scripting (XSS) vulnerability exploitable by a Contributor-level user. The flaw allows injection of a malicious script.
- CVE-2026-94671Medium
The Post Grid plugin in versions up to and including 7.9.5 contains a Cross Site Scripting (XSS) vulnerability exploitable by a Contributor-level user. The flaw allows injection of a malicious script.
Original NVD description (English source)
Missing Authorization vulnerability in Mamunur Rashid The Post Grid allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects The Post Grid: from n/a through 7.9.2.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS