Grid Shortcodes
Grid Shortcodes has one disclosed vulnerability in the WordSec catalog, all reported in 2024; it is fixed as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for Grid Shortcodes has a vendor fix available, so running the current release closes it.
All of these findings were reported by Ngô Thiên An (ancorn_). Grid Shortcodes is installed on roughly 2,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.
CVE-2024-29797Grid Shortcodes <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records

Grid Shortcodes
Author
WP Darko
A responsive and easy-to-use tool for dividing your content in your posts/pages. This ultra-lightweight plugin allows you to put your content in columns of various widths. What you see is what you get, and it’s totally free. Usage example 1. Create rows using [GDC_row] [GDC_row][/GDC_row] 2. Add columns using [GDC_column] [GDC_row] [GDC_column size="third"] Your content here [/GDC_column] [GDC_column size="third"] Your content here [/GDC_column] [GDC_column size="third"] Your content here [/GDC_column] [/GDC_row] Available sizes half third two-thirds quarter three-quarters See more code examples on the documentation page. Support Find help in our forums for this plugin (we’ll answer you fast, promise).
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C