CVE-2026-24369
HighCVSS 7.1Exploitation Probability (EPSS)
Low risk23th percentile - higher than 23% of all known CVEs
Summary
Missing Authorization vulnerability in ThemeOne The Grid allows Exploiting Incorrectly Configured Access Control Security Levels. Affects versions from n/a through 2.8.0.
Risk Assessment
An attacker could gain access to functions or data they should not have permissions for, potentially leading to confidentiality and integrity breaches of the site.
Recommendation
Update The Grid theme to a version newer than 2.8.0 if a patch is available, or configure appropriate access controls.
Other vulnerabilities in The Grid
See all- CVE-2026-28191High
Incorrect Privilege Assignment vulnerability in ThemeOne The Grid allows Privilege Escalation. Affects versions from n/a through 2.8.0.
- CVE-2026-24368Medium
Missing Authorization vulnerability in ThemeOne The Grid allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects The Grid: from n/a through 2.8.0.
Original NVD description (English source)
Missing Authorization vulnerability in ThemeOne The Grid allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects The Grid: from n/a through 2.8.0.