ThemeOne vulnerabilities and threats

5 threats

Severity	CVSS	Signals	Threat	Source	Published
Critical	10.0	MirageEPSS 4.4%	CVE-2026-94169The Grid (WordPress theme) · Code Injection Critical10.0MirageEPSS 4.4%2026-10-16CVE Database V5CVE-2026-94169 CVE-2026-94169 is a critical code injection vulnerability in Theme-one The Grid versions prior to 2.8.2. It allows an attacker to perform command injection due to improper control of code generation. The vulnerability has a CVSS score of 10.0, indicating high impact on confidentiality, integrity, and availability. MirageEPSS 4.4%Vulnerability Theme-one	CVE Database V5	2026-10-16
High	8.8	EPSS 0.4%	CVE-2026-28191The Grid (WordPress plugin) · Incorrect Privilege Assignment High8.8EPSS 0.4%2026-08-18CVE Database V5CVE-2026-28191 Incorrect Privilege Assignment vulnerability in ThemeOne The Grid allows Privilege Escalation. This issue affects The Grid: from n/a through 2.8.0. EPSS 0.4%Vulnerability ThemeOne CWE-266	CVE Database V5	2026-08-18
Medium	6.5	EPSS 0.2%	CVE-2026-24370The Grid (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.2%2026-03-25CVE Database V5CVE-2026-24370 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeOne The Grid allows Stored XSS. This issue affects The Grid: from n/a through 2.8.0. EPSS 0.2%Vulnerability ThemeOne CWE-79	CVE Database V5	2026-03-25
High	7.1	EPSS 0.3%	CVE-2026-24369The Grid (WordPress plugin) · Missing Authorization High7.1EPSS 0.3%2026-03-25CVE Database V5CVE-2026-24369 Missing Authorization vulnerability in ThemeOne The Grid allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects The Grid: from n/a through 2.8.0. EPSS 0.3%Vulnerability ThemeOne CWE-862	CVE Database V5	2026-03-25
Medium	5.3	EPSS 0.2%	CVE-2026-24368The Grid (WordPress plugin) · Missing Authorization Medium5.3EPSS 0.2%2026-01-22CVE Database V5CVE-2026-24368 Missing Authorization vulnerability in ThemeOne The Grid allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects The Grid: from n/a through 2.8.0. EPSS 0.2%Vulnerability ThemeOne CWE-862	CVE Database V5	2026-01-22

Page 1 of 1