Rays Grid Vulnerabilities

The RAYS Grid plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.1. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to perform an unauthorized action granted they can trick a site administrat...

CVSS:

4.3

Affected:

up to 1.3.1

Fix:

No patched version reported

Disclosed:

Feb 24, 2025

CVE-2025-27317 on NVD →

The RAYS Grid plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.2.2. This is due to missing or incorrect nonce validation on the rsgd_insert_update() function. This makes it possible for unauthenticated attackers to update post fields via a forged request granted they...

CVSS:

4.3

Affected:

up to 1.2.2

Fixed in:

1.3.0

Disclosed:

Aug 16, 2021

CVE-2021-4423 on NVD →