Vulnerabilities > G5Theme > Grid Plus

DATE CVE VULNERABILITY TITLE RISK
2023-10-30 CVE-2023-5250 Unspecified vulnerability in G5Theme Grid Plus
The Grid Plus plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 1.3.2 via a shortcode attribute.
network
low complexity
g5theme
8.8
2023-10-30 CVE-2023-5251 Missing Authorization vulnerability in G5Theme Grid Plus
The Grid Plus plugin for WordPress is vulnerable to unauthorized modification of data and loss of data due to a missing capability check on the 'grid_plus_save_layout_callback' and 'grid_plus_delete_callback' functions in versions up to, and including, 1.3.2.
network
low complexity
g5theme CWE-862
5.4
2023-10-27 CVE-2023-46209 Cross-site Scripting vulnerability in G5Theme Grid-Plus
Unauth.
network
low complexity
g5theme CWE-79
6.1