Portfolio, Gallery, Product Catalog – Grid KIT Portfolio vulnerabilities

Product

Portfolio, Gallery, Product Catalog – Grid KIT Portfolio

by wpsofts · last CVE Nov 20, 2025

CVEs

On KEV

6.4

Max CVSS

New 30D

Severity mix

Critical 0High 0Medium 3Low 0

Severity

Exploitation

Watch

Add Portfolio, Gallery, Product Catalog – Grid KIT Portfolio to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2025-5092	6.4	0%	Nov 20	Multiple Plugins and Themes <= (Various Versions) - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via lightGallery JavaScript Library Affected: through 2.2.1
CVE-2023-3292	6.1	0%	Jul 31	The grid-kit-premium WordPress plugin before 2.2.0 does not escape some parameters as well as generated URLs before outputting them in attributes, leading to Reflected Cross-Site… Affected: before 2.2.0
CVE-2021-25090	5.4	1%	Apr 11	The Portfolio Gallery, Product Catalog WordPress plugin before 2.1.0 does not have authorisation and CSRF checks in various functions related to AJAX actions, allowing any… Affected: before 2.1.0