Read the docs

wpsofts

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

wpsofts records in CISA KEV

No wpsofts vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Portfolio Gallery, Product Catalog - Grid Kit Portfolio 2 records MEDIUM

Records

3 records

TI-2023-03081 CVE-2023-3292 · GHSA-9434-4jwv-6xgc

Grid Kit Premium < 2.2.0 - Multiple Reflected Cross-Site Scripting

Priority MEDIUM 60

The grid-kit-premium WordPress plugin before 2.2.0 does not escape some parameters as well as generated URLs before outputting them in attributes, leading to Reflected Cross-Site Scripting which could be used against hig…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00458 Published 2023-07-31 Fixed in 2.2.0
TI-2025-04566 CVE-2025-5092 · GHSA-hvm5-wg42-9f5q

Cross-site scripting in lightgalleryteam LightGallery WP

Priority LOW 28

Multiple plugins and/or themes for WordPress are vulnerable to Stored Cross-Site Scripting via the plugin's bundled lightGallery library (<= 2.8.3) in various versions due to insufficient input sanitization and output es…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00256 Published 2025-11-20 No fix listed CWE-79
TI-2021-07368 CVE-2021-25090 · GHSA-3prr-q5hc-2742

GridKit Portfolio < 2.1.0 - Subscriber+ Stored Cross-Site Scripting

Priority LOW 25

The Portfolio Gallery, Product Catalog WordPress plugin before 2.1.0 does not have authorisation and CSRF checks in various functions related to AJAX actions, allowing any authenticated users, such as subscriber, to call…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.006 Published 2022-04-11 Fixed in 2.1.0 CWE-79
Open these records in search →