Addonmaster

9 CVEs across 5 Addonmaster products. Browse Addonmaster vulnerabilities, severities, and proof-of-concept exploits.

Addonmaster products with known CVEs

ProductCVEs
Post Grid Master7
Post Grid Master3
Bootstrap Shortcodes Ultimate1
Load More Anything1
Load More Anything1
Addonmaster CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-5084Medium6.12025-07-24The Post Grid Master plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘argsArray['read_more_text']’ parameter in all versions up to…
CVE-2025-30974Medium4.32025-06-06Missing Authorization vulnerability in Akhtarujjaman Shuvo Post Grid Master ajax-filter-posts allows Exploiting Incorrectly Configured Access Control Security…
CVE-2025-24733Medium6.52025-01-24Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Akhtarujjaman Shuvo Post Grid Master a…
CVE-2024-11642Critical9.82025-01-09The Post Grid Master – Custom Post Types, Taxonomies & Ajax Filter Everything with Infinite Scroll, Load More, Pagination & Shortcode Builder plugin for WordPr…
CVE-2024-43156High7.12024-08-12Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in AddonMaster Post Grid Master allows Reflected XSS…
CVE-2024-24704Medium5.42024-06-11Missing Authorization vulnerability in AddonMaster Load More Anything.This issue affects Load More Anything: from n/a through 3.3.3.
CVE-2024-34390Medium6.52024-05-06Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AddonMaster Post Grid Master allows Stored XSS.This issue…
CVE-2024-34372Medium5.32024-05-06Missing Authorization vulnerability in AddonMaster Post Grid Master.This issue affects Post Grid Master: from n/a through 3.4.7.
CVE-2023-47851Medium6.52023-11-30Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Akhtarujjaman Shuvo Bootstrap Shortcodes Ultimate allows…