Grid Plus – Unlimited grid layout vulnerabilities

2 known vulnerabilities in Grid Plus – Unlimited grid layout from G5Theme. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.3 High severity

  Grid Plus – Unlimited grid layout: Improper Control of Generation of Code

  CVE-2024-10910Dec 12, 2024G5Theme

  The The Grid Plus – Unlimited grid layout plugin for WordPress is vulnerable to arbitrary shortcode execution via grid_plus_load_by_category AJAX action in all versions up to, and including, 1.3.5. This is due to the software allowing users to execute an actio

• 8.8 High severity

  Grid Plus – Unlimited grid layout: Improper Control of Filename for Include/Require Statement in PHP Program

  CVE-2023-5250Oct 30, 2023G5ThemeEPSS 1.31%

  The Grid Plus plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 1.3.3 via a shortcode attribute. This allows subscriber-level, and above, attackers to include and execute arbitrary files on the server, allowing the ex