filter_\&_grids vulnerabilities

2 known vulnerabilities in filter_\&_grids from Ymc-22. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.3 High severity

  Filter & Grids: Missing Authorization

  CVE-2024-39664Nov 1, 2024YMC

  Missing Authorization vulnerability in YMC Filter & Grids allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Filter & Grids: from n/a through 2.8.33.

• 9.8 Critical severity

  Filter & Grids: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2024-6164Jul 18, 2024Filter & GridsEPSS 1.09%

  The Filter & Grids WordPress plugin before 2.8.33 is vulnerable to Local File Inclusion via the post_layout parameter. This makes it possible for an unauthenticated attacker to include and execute PHP files on the server, allowing the execution of any PHP code