WP
Vendor
wpsofts
3
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-5092 | PG Portfolio, Gallery, Product Catalog – Grid KIT Portfolio wpsofts | 6.4 | Nov 20 | Multiple Plugins and Themes <= (Various Versions) - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via lightGallery JavaScript Library |
| CVE-2023-3292 | PG Portfolio Gallery, Product Catalog - Grid Kit Portfolio Wpsofts | 6.1 | Jul 31 | The grid-kit-premium WordPress plugin before 2.2.0 does not escape some parameters as well as generated URLs before outputting them in attributes, leading to Reflected Cross-Site… |
| CVE-2021-25090 | PG Portfolio Gallery, Product Catalog - Grid Kit Portfolio Wpsofts | 5.4 | Apr 11 | The Portfolio Gallery, Product Catalog WordPress plugin before 2.1.0 does not have authorisation and CSRF checks in various functions related to AJAX actions, allowing any… |