CVE Intelligence

ThemeOne vulnerabilities

🔔 Create alert RSS

Published CVEs affecting ThemeOne products: 4 record(s), with severity, exploitation and fixes.

The Grid 4

Exploited only (KEV) →

CVE-2026-28191 High · 8.8 CWE-266 Aug 18, 2026
WordPress The Grid plugin <= 2.8.0 - Privilege Escalation vulnerability
Incorrect Privilege Assignment vulnerability in ThemeOne The Grid allows Privilege Escalation. This issue affects The Grid: from n/a through 2.8.0.
CVE-2026-24370 Medium · 6.5 CWE-79 Mar 25, 2026
WordPress The Grid plugin <= 2.8.0 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeOne The Grid allows Stored XSS. This issue affects The Grid: from n/a through 2.8.0.
CVE-2026-24369 High · 7.1 CWE-862 Mar 25, 2026
WordPress The Grid plugin <= 2.8.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in ThemeOne The Grid allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects The Grid: from n/a through 2.8.0.
CVE-2026-24368 Medium · 5.3 CWE-862 Jan 22, 2026
WordPress The Grid plugin <= 2.8.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in ThemeOne The Grid allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects The Grid: from n/a through 2.8.0.