Portfolio, Gallery, Product Catalog – Grid KIT Portfolio vulnerabilities

Product

Portfolio, Gallery, Product Catalog – Grid KIT Portfolio

by wpsofts · last CVE Nov 20, 2025

CVEs

On KEV

6.4

Max CVSS

New 30D

Severity mix

Critical 0High 0Medium 3Low 0

Severity

Exploitation

Watch

Add Portfolio, Gallery, Product Catalog – Grid KIT Portfolio to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2025-5092	6.4	0%	Nov 20	Multiple Plugins and Themes <= (Various Versions) - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via lightGallery JavaScript Library Affected: through 2.2.1
CVE-2023-3292	6.1	0%	Jul 31	Grid Kit Premium < 2.2.0 - Multiple Reflected Cross-Site Scripting Affected: before 2.2.0
CVE-2021-25090	5.4	1%	Apr 11	GridKit Portfolio < 2.1.0 - Subscriber+ Stored Cross-Site Scripting Affected: before 2.1.0