Unauthorized Data Modification in Grid Plus Plugin for WordPress

CVE-2023-5251

What is CVE-2023-5251?

The Grid Plus plugin for WordPress suffers from a vulnerability that allows authenticated users with subscriber privileges or higher to bypass necessary capability checks. This flaw enables attackers to manipulate grid layouts by adding, updating, or deleting data without proper authorization, potentially leading to significant data loss and compromised site integrity. The affected versions include all releases up to and including 1.3.2. Website administrators should prioritize updating their plugins to ensure their sites remain secure.

References