CVE-2026-125436: WordPress The Post Grid plugin <= 7.9.9 - Broken Access Control vulnerability

Q: Who can exploit this issue?

The CVSS vector indicates that an attacker needs network access and low-level privileges. No user interaction is required.

Q: What security impact is indicated?

The issue is rated medium severity with a 4.3 CVSS score. It has a low confidentiality impact and no indicated integrity or availability impact.

Q: Which versions are affected?

The affected range is reported as versions through 7.9.9. No fixed version is provided in the available data.

Published Nov 11, 2026

Updated

Missing Authorization vulnerability in Mamunur Rashid The Post Grid the-post-grid allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects The Post Grid: from n/a through 7.9.9.

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade wordpress/the-post-grid to a version that resolves this vulnerability.
Fixed in 7.9.10

Event History

Nov 11, 2026

CVE Published

via MITRE·12:39 PM

Data Sourced

via MITRE·12:39 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·01:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

The CVSS vector indicates that an attacker needs network access and low-level privileges. No user interaction is required.

What security impact is indicated?

The issue is rated medium severity with a 4.3 CVSS score. It has a low confidentiality impact and no indicated integrity or availability impact.

Which versions are affected?

The affected range is reported as versions through 7.9.9. No fixed version is provided in the available data.

CVE-2026-125436: WordPress The Post Grid plugin <= 7.9.9 - Broken Access Control vulnerability

Remediation

Event History

Frequently Asked Questions

Who can exploit this issue?

What security impact is indicated?

Which versions are affected?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What security impact is indicated?

Which versions are affected?