Skip to content
OpenAdvisories
Medium · 6.5 CVE-2025-24733 EUVD-2025-3925GHSA-ggj6-66q9-rcw5

WordPress Post Grid Master plugin <= 3.4.12 - Local File Inclusion vulnerability

Published Jan 24, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Akhtarujjaman Shuvo Post Grid Master ajax-filter-posts allows PHP Local File Inclusion.This issue affects Post Grid Master: from n/a through <= 3.4.12.

Affected products

VendorProductAffectedFixed
Akhtarujjaman Shuvo Post Grid Master ≤ 3.4.12 —

References