Extension WordPress
Vulnérabilités Grid Plus – Unlimited grid layout
Cette page rassemble les failles publiées pour Grid Plus – Unlimited grid layout, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Grid Plus – Unlimited grid layout
5 fiches
Grid Plus <= 3.3 – Reflected Cross-Site Scripting
The Grid Plus plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 3.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web…
*-3.3
Non indiqué
13/09/2025
Grid Plus – Unlimited grid layout <= 1.3.5 – Unauthenticated Arbitrary Shortcode Execution via grid_plus_load_by_category
The The Grid Plus – Unlimited grid layout plugin for WordPress is vulnerable to arbitrary shortcode execution via grid_plus_load_by_category AJAX action in all versions up to, and including, 1.3.5. This is due to the software allowing users to…
*-1.3.5
Non indiqué
11/12/2024
Grid Plus <= 1.3.2 – Missing Authorization to Authenticated (Subscriber+) Grid Layout Add/Update/Delete
The Grid Plus plugin for WordPress is vulnerable to unauthorized modification of data and loss of data due to a missing capability check on the 'grid_plus_save_layout_callback' and 'grid_plus_delete_callback' functions in versions up to, and including, 1.3.2. This makes…
*-1.3.2
1.3.3
29/10/2023
Grid Plus <= 1.3.3 – Authenticated (Subscriber+) Local File Inclusion via Shortcode
The Grid Plus plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 1.3.3 via a shortcode attribute. This allows subscriber-level, and above, attackers to include and execute arbitrary files on the server,…
*-1.3.3
1.3.4
29/10/2023
Grid Plus <= 1.3.4 – Reflected Cross-Site Scripting via grid_id
The Grid Plus plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘grid_id’ parameter in versions up to, and including, 1.3.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers…
*-1.3.4
1.3.5
19/10/2023
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.