Smart Post – Post Grid, Post Carousel, Post Slider Gutenberg Blocks for Blog & News

Information

Software Type	Plugin
Software Slug	post-carousel (view on wordpress.org)
Software Status	Active
Software Author	shapedplugin
Software Website	wpsmartpost.com
Software Downloads	836,826
Software Active Installs	20,000
Software Record Last Updated	September 9, 2026

7 Vulnerabilities

Submit a Vulnerability

Smart Post – Post Grid, Post Carousel, Post Slider Gutenberg Blocks for Blog & News 4.0.0 - 4.0.7 - Authenticated (Contributor+) Insecure Direct Object Reference

4.3

CVE-2026-78150

Sep 5, 2026

Researcher: Revanth Hari Narayana Matte

Smart Post – Post Grid, Post Carousel, Post Slider Gutenberg Blocks for Blog & News 4.0.0 - 4.0.7 - Unauthenticated Password-Protected Post Content Disclosure

5.3

CVE-2026-78149

Sep 3, 2026

Researcher: Revanth Hari Narayana Matte

Smart Post Show – Post Grid, Post Carousel & Slider, and List Category Posts <= 3.0.12 - Authenticated (Administrator+) PHP Object Injection

7.2

CVE-2026-3017

Apr 13, 2026

Researcher: Vilaysone CHANTHAVONG (0xJ0cKkY)

Smart Post Show <= 3.0.0 - Authenticated (Editor+) Stored Cross-Site Scripting via Pagination Color

5.5

CVE-2024-8187

Oct 8, 2024

Researcher: Dmitrii Ignatyev

Post Grid, Post Carousel, & List Category Posts <= 2.4.27 - Authenticated (Editor+) Stored Cross-Site Scripting

4.4

CVE-2024-3996

Apr 4, 2024

Researcher: Dmitrii Ignatyev

Post Grid, Post Carousel, & List Category Posts <= 2.4.18 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

6.4

CVE-2023-0097

Jan 6, 2023

Researcher: István Márton

Post Carousel < 2.3.5 - Missing Capabilities Check

7.3

CVE ID Unknown

Aug 16, 2021

Researcher: WPScanTeam

Title	Status	CVE ID	CVSS	Researchers	Date
Smart Post – Post Grid, Post Carousel, Post Slider Gutenberg Blocks for Blog & News 4.0.0 - 4.0.7 - Authenticated (Contributor+) Insecure Direct Object Reference	Patched	CVE-2026-78150	4.3	Revanth Hari Narayana Matte	September 5, 2026
Smart Post – Post Grid, Post Carousel, Post Slider Gutenberg Blocks for Blog & News 4.0.0 - 4.0.7 - Unauthenticated Password-Protected Post Content Disclosure	Patched	CVE-2026-78149	5.3	Revanth Hari Narayana Matte	September 3, 2026
Smart Post Show – Post Grid, Post Carousel & Slider, and List Category Posts <= 3.0.12 - Authenticated (Administrator+) PHP Object Injection	Patched	CVE-2026-3017	7.2	Vilaysone CHANTHAVONG (0xJ0cKkY)	April 13, 2026
Smart Post Show <= 3.0.0 - Authenticated (Editor+) Stored Cross-Site Scripting via Pagination Color	Patched	CVE-2024-8187	5.5	Dmitrii Ignatyev	October 8, 2024
Post Grid, Post Carousel, & List Category Posts <= 2.4.27 - Authenticated (Editor+) Stored Cross-Site Scripting	Patched	CVE-2024-3996	4.4	Dmitrii Ignatyev	April 4, 2024
Post Grid, Post Carousel, & List Category Posts <= 2.4.18 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode	Patched	CVE-2023-0097	6.4	István Márton	January 6, 2023
Post Carousel < 2.3.5 - Missing Capabilities Check	Patched		7.3	WPScanTeam	August 16, 2021

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation