Grid
Grid has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of September 2026. Their average CVSS score is 4.3, and the most serious one scores 4.3 out of 10.
The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (100%).
The one issue recorded for Grid has a vendor fix available, so running the current release closes it.
All of these findings were reported by Nguyen Xuan Chien. Grid is installed on roughly 60 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 5.9.16.
CVE-2025-58657Grid <= 2.3.1 - Cross-Site Request Forgery
Read the full analysisVulnerability Records
Grid
Author
EdwardBock
This plugin is no longer in active development. Have a look at BlockX for a similar editor and developer experience. What is Grid? Grid allows Editors to easily create and maintain Landingpages Grid is build of a grid containing Containers and Boxes Grid is a CMS-neutral Library and this is the WordPress plugin that implements it Types of Boxes Static Boxes – Free-HTML-Box Medialibrary-Box Video-Box List-Boxes – Ordered and filtered Lists of Contents Number of Items as well as criteria for sorting and filtering are configurable Configuration Boxes – Container configuration Slot configuration Content-Boxes – Single Posts of any kind as Teasers Reuseable Boxes – All Boxes may be reused across several Landingpages Easy extendable with new boxes. Have a look at doc.the-grid.ws (english is coming soon). Arbitrary section There’s a documentation at doc.the-grid.ws (english is coming soon)
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C