The Grid vulnerabilities

The Grid plugin (the-grid) contains a Code Injection vulnerability due to improper control of code generation. The vulnerability allows an attacker to perform Command Injection.

Incorrect Privilege Assignment vulnerability in ThemeOne The Grid allows Privilege Escalation. Affects versions from n/a through 2.8.0.

The Grid plugin for WordPress (up to version 2.8.0) contains a stored Cross-site Scripting (XSS) vulnerability due to improper neutralization of input during web page generation. An attacker can inject malicious scripts that execute in the victim's browser.

Missing Authorization vulnerability in ThemeOne The Grid allows Exploiting Incorrectly Configured Access Control Security Levels. Affects versions from n/a through 2.8.0.

Missing Authorization vulnerability in ThemeOne The Grid allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects The Grid: from n/a through 2.8.0.