Custom Layouts Vulnerabilities

[en] Missing Authorization vulnerability in Code Amp Custom Layouts – Post + Product grids made easy custom-layouts allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Custom Layouts – Post + Product grids made easy: from n/a through <= 1.4.12.

Affected:

up to 1.4.12

Fix:

No patched version reported

Disclosed:

Dec 9, 2025

CVE-2025-62996 on NVD →

The Custom Layouts – Post + Product grids made easy plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in versions up to, and including, 1.4.12. This makes it possible for authenticated attackers, with contributor-level access and above, to perform an unauthorized...

CVSS:

4.3

Affected:

up to 1.4.12

Fixed in:

1.5.0

Disclosed:

Dec 5, 2025

CVE-2025-62996 on NVD →

[en] Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Code Amp Custom Layouts – Post + Product grids made easy allows Stored XSS.This issue affects Custom Layouts – Post + Product grids made easy: from n/a through 1.4.11.

Affected:

up to 1.4.12

Fixed in:

1.4.12

Disclosed:

Aug 18, 2024

CVE-2024-43305 on NVD →

The Custom Layouts – Post + Product grids made easy plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.4.11 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to injec...

CVSS:

6.4

Affected:

up to 1.4.11

Fixed in:

1.4.12

Disclosed:

Aug 16, 2024

CVE-2024-43305 on NVD →