Advisories · Technology

g5theme Grid Plus – Unlimited grid layout.

Every CVE that names g5theme Grid Plus – Unlimited grid layout among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-10910 CVE record

CVSS 7.3 High

Grid Plus – Unlimited grid layout <= 1.3.5 - Unauthenticated Arbitrary Shortcode Execution via grid_plus_load_by_category
- g5theme Grid Plus – Unlimited grid layout
- Code injection
Not analysed yet 12 Dec 2024
CVE-2023-5251 CVE record

CVSS 5.4 Medium

Grid Plus <= 1.3.2 - Missing Authorization to Authenticated (Subscriber+) Grid Layout Add/Update/Delete
- g5theme Grid Plus – Unlimited grid layout
- Broken access control
Not analysed yet 30 Oct 2023
CVE-2023-5250 CVE record

CVSS 8.8 High

Grid Plus <= 1.3.3 - Authenticated (Subscriber+) Local File Inclusion via Shortcode
- g5theme Grid Plus – Unlimited grid layout
- File inclusion
Not analysed yet 30 Oct 2023
CVE-2023-46209 CVE record

CVSS 7.1 High

WordPress Grid Plus Plugin <= 1.3.2 is vulnerable to Cross Site Scripting (XSS)
- G5Theme Grid Plus – Unlimited grid layout
- Cross-site scripting (XSS)
Not analysed yet 27 Oct 2023