Grid Plus

3 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-5251 MEDIUM This Month

The Grid Plus plugin for WordPress is vulnerable to unauthorized modification of data and loss of data due to a missing capability check on the 'grid_plus_save_layout_callback' and. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress Authentication Bypass Grid Plus

NVD VulDB

CVSS 3.1

5.4

EPSS

0.0%

CVE-2023-5250 HIGH This Week

The Grid Plus plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 1.3.3 via a shortcode attribute. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP Information Disclosure RCE WordPress LFI +1

NVD VulDB

CVSS 3.1

8.8

EPSS

0.1%

CVE-2023-46209 MEDIUM This Month

Unauth. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Grid Plus

NVD

CVSS 3.1

6.1

EPSS

0.3%

CVE-2023-5251

EPSS 0% CVSS 5.4

MEDIUM This Month

WordPress Authentication Bypass Grid Plus

NVD VulDB

CVE-2023-5250

EPSS 0% CVSS 8.8

HIGH This Week

PHP Information Disclosure RCE +3

NVD VulDB

CVE-2023-46209

EPSS 0% CVSS 6.1

MEDIUM This Month

Unauth. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Grid Plus

NVD