CVE-2024-10910 Grid Plus – Unlimited grid layout <= 1.3.5 - Unauthenticated Arbitrary Shortcode Execution via grid_plus_load_by_category

🗓️ 12 Dec 2024 04:10:23Reported by WordfenceType

Vulnerability in WordPress plugin allows unauthenticated shortcode execution in versions ≤ 1.3.5

Reporter	Title	Published	Views	Family All 4
CVE	CVE-2024-10910	12 Dec 202405:15	–	cve
Cvelist	CVE-2024-10910 Grid Plus – Unlimited grid layout <= 1.3.5 - Unauthenticated Arbitrary Shortcode Execution via grid_plus_load_by_category	12 Dec 202404:23	–	cvelist
NVD	CVE-2024-10910	12 Dec 202405:15	–	nvd
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (December 9, 2024 to December 15, 2024)	19 Dec 202417:13	–	wordfence

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/266032a8-a139-4a14-8eda-8be7a66357df
wordpress	www.wordpress.org/plugins/grid-plus/
plugins	www.plugins.trac.wordpress.org/browser/grid-plus/tags/1.3.5/core/ajax_fe.php

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

12 Dec 2024 04:23Current

7.6High risk

Vulners AI Score7.6

CVSS37.3

EPSS0.001

SSVC

CWE-94