WordPress The Grid plugin <= 2.8.1 - Remote Code Execution (RCE) vulnerability

Description

Improper Control of Generation of Code ('Code Injection') vulnerability in Theme-one The Grid the-grid allows Command Injection.This issue affects The Grid: from n/a through 2.8.1.

Affected Products

Vendor	Product	Versions
theme-one	the grid	0

References

https://patchstack.com/database/wordpress/plugin/the-grid/vulnerability/wordpress-the-grid-plugin-2-8-1-remote-code-execution-rce-vulnerability?_s_id=cve(vdb-entry)

Related News (1 articles)

Tier C

VulDB21h ago

CVE-2026-94169 | me-one The Grid Plugin up to 2.8.1 on WordPress code injection

→ No new info (linked only)

Discussion (0)

Loading…

CVSS 3.110.0 CRITICAL

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

CISA KEV✅ Yes

Actively exploited✅ Yes

CWECWE-94

PublishedOct 16, 2026

Trending Score102🔥

Source articles1

Independent1

Info Completeness0/14

Missing: cve_id, title, description, vendor, product, versions, cvss, epss, cwe, kev, exploit, patch, iocs, mitre_attack

Community Vote

0 upvotes0 downvotes

No votes yet