Skip to content
OpenAdvisories

Product · G5Theme

Grid Plus – Unlimited grid layout

4 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 5.4

    Grid Plus <= 1.3.2 - Missing Authorization to Authenticated (Subscriber+) Grid Layout Add/Update/Delete

    The Grid Plus plugin for WordPress is vulnerable to unauthorized modification of data and loss of data due to a missing capability check on the 'grid_plus_save_layout_callback' and 'grid_plus_delete_callback' functions in versions up to, and including, 1.3.2.…