CVE Intelligence

Vulnerabilidades de ThemeOne

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de ThemeOne: 5 registro(s), com severidade, exploração e correções.

The Grid 5

Somente exploradas (KEV) →

CVE-2026-94169 Crítica · 10.0 CWE-94 16/10/2026
WordPress The Grid plugin <= 2.8.1 - Remote Code Execution (RCE) vulnerability
Improper Control of Generation of Code ('Code Injection') vulnerability in Theme-one The Grid the-grid allows Command Injection.This issue affects The Grid: from n/a through 2.8.1.
CVE-2026-28191 Alta · 8.8 CWE-266 18/08/2026
WordPress The Grid plugin <= 2.8.0 - Privilege Escalation vulnerability
Incorrect Privilege Assignment vulnerability in ThemeOne The Grid allows Privilege Escalation. This issue affects The Grid: from n/a through 2.8.0.
CVE-2026-24370 Média · 6.5 CWE-79 25/03/2026
WordPress The Grid plugin <= 2.8.0 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeOne The Grid allows Stored XSS. This issue affects The Grid: from n/a through 2.8.0.
CVE-2026-24369 Alta · 7.1 CWE-862 25/03/2026
WordPress The Grid plugin <= 2.8.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in ThemeOne The Grid allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects The Grid: from n/a through 2.8.0.
CVE-2026-24368 Média · 5.3 CWE-862 22/01/2026
WordPress The Grid plugin <= 2.8.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in ThemeOne The Grid allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects The Grid: from n/a through 2.8.0.