Skip to content
OpenAdvisories

Product · G5Theme

Grid Plus – Unlimited grid layout

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.3
    CVE-2024-10910

    Grid Plus – Unlimited grid layout <= 1.3.5 - Unauthenticated Arbitrary Shortcode Execution via grid_plus_load_by_category

    The The Grid Plus – Unlimited grid layout plugin for WordPress is vulnerable to arbitrary shortcode execution via grid_plus_load_by_category AJAX action in all versions up to, and including, 1.3.5. This is due to the software allowing users to execute an acti…

    G5Theme Grid Plus – Unlimited grid layout Web / CMS
  • High 8.8
    CVE-2023-5250

    Grid Plus <= 1.3.3 - Authenticated (Subscriber+) Local File Inclusion via Shortcode

    The Grid Plus plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 1.3.3 via a shortcode attribute. This allows subscriber-level, and above, attackers to include and execute arbitrary files on the server, allowing the e…

    G5Theme Grid Plus – Unlimited grid layout Web / CMS
  • High 7.1
    CVE-2023-46209

    WordPress Grid Plus Plugin <= 1.3.2 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in G5Theme Grid Plus – Unlimited grid plugin <= 1.3.2 versions.

    G5Theme Grid Plus – Unlimited grid layout