CVE-2026-56056
MediumCVSS 6.5Summary
The Post Grid plugin for WordPress by Mamunur Rashid contains a Stored XSS vulnerability due to improper neutralization of input during web page generation. The issue affects versions through 7.9.7.
Risk Assessment
Malicious script stored in content may execute in the browser of an administrator or site visitors, enabling session hijacking or content modification.
Recommendation
Update The Post Grid plugin to a version later than 7.9.7.
Other vulnerabilities in The Post Grid
See all- CVE-2026-94680Medium
The Post Grid plugin in versions up to and including 7.9.5 contains a Cross Site Scripting (XSS) vulnerability exploitable by a Contributor-level user. The flaw allows injection of a malicious script.
- CVE-2026-94671Medium
The Post Grid plugin in versions up to and including 7.9.5 contains a Cross Site Scripting (XSS) vulnerability exploitable by a Contributor-level user. The flaw allows injection of a malicious script.
- CVE-2026-49054Medium
The Post Grid plugin by Mamunur Rashid contains a missing authorization vulnerability that allows exploitation of incorrectly configured access control security levels. This issue affects The Post Grid from n/a through 7.9.2.
Original NVD description (English source)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mamunur Rashid The Post Grid the-post-grid allows Stored XSS.This issue affects The Post Grid: from n/a through 7.9.7.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS