Read the docs

WP Grids

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

WP Grids records in CISA KEV

No WP Grids vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Slicko 1 record LOW

Records

5 records

TI-2026-48314 CVE-2026-68567 · GHSA-f7pj-9rgc-v5q6

WordPress EasyTest – Simplify A/B Testing plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Grids EasyTest – Simplify A/B Testing convertpro allows DOM-Based XSS.This issue affects EasyTest – Simplify A/B Te…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00251 Published 2026-08-18 No fix listed CWE-79
TI-2025-16206 CVE-2025-22302 · GHSA-2wvv-4p4q-7mq5

WordPress WP Wand plugin <= 1.2.5 - Broken Access Control vulnerability

Priority LOW 30

Missing Authorization vulnerability in WP Grids WP Wand ai-content-generation allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Wand: from n/a through <= 1.2.5.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00335 Published 2025-01-07 No fix listed CWE-862
TI-2025-39179 CVE-2025-63031 · GHSA-8c3v-8qc8-f9h3

WordPress EasyTest – Simplify A/B Testing plugin <= 1.0.1 - Broken Access Control vulnerability

Priority LOW 29

Missing Authorization vulnerability in WP Grids EasyTest – Simplify A/B Testing convertpro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects EasyTest – Simplify A/B Testing: from…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00209 Published 2025-12-31 No fix listed CWE-862
TI-2024-34506 CVE-2024-51591 · GHSA-4g8r-fg9v-3p5j

WordPress Slicko plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Grids Slicko slicko-for-elementor allows DOM-Based XSS.This issue affects Slicko: from n/a through <= 1.2.0.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.0027 Published 2024-11-09 No fix listed CWE-79
TI-2026-20509 CVE-2026-25391 · GHSA-3vcp-wrg5-3827

WordPress WP Wand plugin <= 1.3.07 - Broken Access Control vulnerability

Priority LOW 24

Missing Authorization vulnerability in WP Grids WP Wand ai-content-generation allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Wand: from n/a through <= 1.3.07.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00243 Published 2026-02-19 No fix listed CWE-862
Open these records in search →