Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Vendor: WP Grids Clear all filters
TI-2026-48314 CVE-2026-68567 · GHSA-f7pj-9rgc-v5q6

WordPress EasyTest – Simplify A/B Testing plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Grids EasyTest – Simplify A/B Testing convertpro allows DOM-Based XSS.This issue affects EasyTest – Simplify A/B Te…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00251 Published 2026-08-18 No fix listed CWE-79
TI-2026-20509 CVE-2026-25391 · GHSA-3vcp-wrg5-3827

WordPress WP Wand plugin <= 1.3.07 - Broken Access Control vulnerability

Priority LOW 24

Missing Authorization vulnerability in WP Grids WP Wand ai-content-generation allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Wand: from n/a through <= 1.3.07.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00243 Published 2026-02-19 No fix listed CWE-862
TI-2025-39179 CVE-2025-63031 · GHSA-8c3v-8qc8-f9h3

WordPress EasyTest – Simplify A/B Testing plugin <= 1.0.1 - Broken Access Control vulnerability

Priority LOW 29

Missing Authorization vulnerability in WP Grids EasyTest – Simplify A/B Testing convertpro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects EasyTest – Simplify A/B Testing: from…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00209 Published 2025-12-31 No fix listed CWE-862
TI-2025-16206 CVE-2025-22302 · GHSA-2wvv-4p4q-7mq5

WordPress WP Wand plugin <= 1.2.5 - Broken Access Control vulnerability

Priority LOW 30

Missing Authorization vulnerability in WP Grids WP Wand ai-content-generation allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Wand: from n/a through <= 1.2.5.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00335 Published 2025-01-07 No fix listed CWE-862
TI-2024-34506 CVE-2024-51591 · GHSA-4g8r-fg9v-3p5j

WordPress Slicko plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Grids Slicko slicko-for-elementor allows DOM-Based XSS.This issue affects Slicko: from n/a through <= 1.2.0.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.0027 Published 2024-11-09 No fix listed CWE-79