Skip to content
OpenAdvisories

Vendor

IT-RAYS

2 known vulnerabilities.

Products

RAYS Grid 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2025-27317

    WordPress RAYS Grid Plugin <= 1.3.1 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in IT-RAYS RAYS Grid rays-grid allows Cross Site Request Forgery.This issue affects RAYS Grid: from n/a through <= 1.3.1.

    IT-RAYS RAYS Grid
  • Medium 4.3
    CVE-2021-4423

    RAYS Grid <= 1.2.2 - Cross-Site Request Forgery Bypass

    The RAYS Grid plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.2.2. This is due to missing or incorrect nonce validation on the rsgd_insert_update() function. This makes it possible for unauthenticated attac…

    IT-RAYS RAYS Grid Web / CMS