Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2026-24370

WordPress The Grid plugin <= 2.8.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeOne The Grid allows Stored XSS. This issue affects The Grid: from n/a through 2.8.0.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Theme-one Wordpress
Products
The Grid Wordpress
CVE-2026-24369

WordPress The Grid plugin <= 2.8.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in ThemeOne The Grid allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects The Grid: from n/a through 2.8.0.

CVSS 3.1 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Theme-one Wordpress
Products
The Grid Wordpress
CVE-2026-28191

WordPress The Grid plugin <= 2.8.0 - Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in ThemeOne The Grid allows Privilege Escalation. This issue affects The Grid: from n/a through 2.8.0.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Theme-one Wordpress
Products
The Grid Wordpress