PT-2024-16637 · WordPress · The Grid Plus

Name of the Vulnerable Software and Affected Versions: The Grid Plus – Unlimited grid layout plugin for WordPress versions up to, and including, 1.3.5 Description: The issue allows unauthenticated attackers to execute arbitrary shortcodes via the "grid plus load by category" AJAX action. This is...