CVE-2026-24369

Summary (CVE-2026-24369) The WordPress The Grid plugin, prior to version 2.8.0, contains a Missing Authorization vulnerability caused by incorrectly configured access control security levels. This is described as a Broken Access Control issue, potentially enabling unauthorized access to protected...

CVE-2026-24370 WordPress The Grid plugin <= 2.8.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThemeOne The Grid allows Stored XSS. This issue affects The Grid: from n/a through 2.8.0...

CVE-2026-24369 WordPress The Grid plugin <= 2.8.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in ThemeOne The Grid allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects The Grid: from n/a through 2.8.0...

CVE-2026-24369 WordPress The Grid plugin <= 2.8.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in ThemeOne The Grid allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects The Grid: from n/a through 2.8.0...

CVE-2026-24370

The CVE-2026-24370 refers to a Stored XSS in WordPress The Grid plugin prior to version 2.8.0, caused by improper neutralization of input during web page generation. Affected component: The Grid (

CVE-2026-24370 WordPress The Grid plugin <= 2.8.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThemeOne The Grid allows Stored XSS. This issue affects The Grid: from n/a through 2.8.0...

WordPress plugin The Grid has a security vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application plugin. Versions of...

CVE-2026-24368 WordPress The Grid plugin <= 2.8.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in ThemeOne The Grid allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects The Grid: from n/a through 2.8.0...

CVE-2026-24368 WordPress The Grid plugin <= 2.8.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in ThemeOne The Grid allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects The Grid: from n/a through 2.8.0...

CVE-2026-24368

CVE-2026-24368 describes a Missing Authorization vulnerability in the WordPress plugin The Grid (the-grid) prior to version 2.8.0. The issue—named in multiple sources (NVD, CVE listing, Patchstack, and RH/EUVD mirroring)—is a broken access control that could allow unauthorized access or actions d...

WordPress plugin The Grid has a security vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...