Grid Plus – Unlimited grid layout

Grid Plus – Unlimited grid layout has 5 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2025; 3 are fixed and 2 remain unpatched as of September 2026. Their average CVSS score is 6.7, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 2 high. 2023 was the busiest year with 3 disclosures.

The most common weakness is Cross-Site Scripting, behind 2 of the records (40%). Other recurring categories include Code Injection, Missing Authorization.

3 of the records (60%) have a vendor fix, while 2 remain unpatched. The oldest unresolved one dates back to 2024.

4 independent researchers contributed these findings, most of them (2) reported by István Márton.

Strategic Overview

Avg CVSSMedium

6.7/ 10

Patch Coverage60%

Open

Fixed

Get automatic notifications for all Grid Plus – Unlimited grid layout vulnerabilities before they are exploited.

Most severe open issueCVSS 7.3CVE-2024-10910

Grid Plus – Unlimited grid layout <= 1.3.5 - Unauthenticated Arbitrary Shortcode Execution via grid_plus_load_by_category

Read the full analysis

Vulnerability Records

5 records


2025-09-13 00:00	Grid Plus <= 3.3 - Reflected Cross-Site Scripting Grid Plus <= 3.3	`CVE-2025-53352`	6.1 Medium	João Pedro Soares de Alcântara	No
2024-12-11 15:38	Grid Plus – Unlimited grid layout <= 1.3.5 - Unauthenticated Arbitrary Shortcode Execution via grid_plus_load_by_category Grid Plus <= 1.3.5	`CVE-2024-10910`	7.3 High	Arkadiusz Hydzik	No
2023-10-29 00:00	Grid Plus <= 1.3.3 - Authenticated (Subscriber+) Local File Inclusion via Shortcode Grid Plus <= 1.3.3	`CVE-2023-5250`	8.8 High	István Márton	Yes
2023-10-29 00:00	Grid Plus <= 1.3.2 - Missing Authorization to Authenticated (Subscriber+) Grid Layout Add/Update/Delete Grid Plus <= 1.3.2	`CVE-2023-5251`	5.4 Medium	István Márton	Yes
2023-10-19 00:00	Grid Plus <= 1.3.4 - Reflected Cross-Site Scripting via grid_id Grid Plus <= 1.3.4	`CVE-2023-46209`	6.1 Medium	Le Ngoc Anh	Yes

Showing 1–5 of 5 reports