Skip to content

ThemeOne

Products

Product	CVEs	Exploited	Latest
The Grid	4	–	Aug 18, 2026

Exploited and recent CVEs

CVE-2026-28191 High 8.8 WordPress The Grid plugin <= 2.8.0 - Privilege Escalation vulnerability 0.4%
CVE-2026-24370 Medium 6.5 WordPress The Grid plugin <= 2.8.0 - Cross Site Scripting (XSS) vulnerability 0.2%
CVE-2026-24369 High 7.1 WordPress The Grid plugin <= 2.8.0 - Broken Access Control vulnerability 0.3%
CVE-2026-24368 Medium 5.3 WordPress The Grid plugin <= 2.8.0 - Broken Access Control vulnerability 0.2%