CVE-2023-5251

The Grid Plus plugin for WordPress is vulnerable to unauthorized modification of data and loss of data due to a missing capability check on the 'grid_plus_save_layout_callback' and 'grid_plus_delete_callback' functions in versions up to, and including, 1.3.2. This makes it possible for authenticated attackers with subscriber privileges or above, to add, update or delete grid layout. CVE-2023-34014 appears to be a duplicate of this issue.

• CWE-862
• CWE-862

• https://plugins.trac.wordpress.org/browser/grid-plus/tags/1.3.2/core/ajax_be.php#L10Issue Tracking
• https://plugins.trac.wordpress.org/browser/grid-plus/tags/1.3.2/core/ajax_be.php#L69Issue Tracking
• https://plugins.trac.wordpress.org/changeset/2992756/grid-plus#file1
• https://www.wordfence.com/threat-intel/vulnerabilities/id/d2d34c84-473c-49f8-b55c-c869b5479974?source=cveThird Party Advisory
• https://plugins.trac.wordpress.org/browser/grid-plus/tags/1.3.2/core/ajax_be.php#L10Issue Tracking
• https://plugins.trac.wordpress.org/browser/grid-plus/tags/1.3.2/core/ajax_be.php#L69Issue Tracking
• https://www.wordfence.com/threat-intel/vulnerabilities/id/d2d34c84-473c-49f8-b55c-c869b5479974?source=cveThird Party Advisory

Published

Oct 30, 2023

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-52504In the Linux kernel, the following vulnerability has been re…7.1
• CVE-2023-52505In the Linux kernel, the following vulnerability has been re…4.7
• CVE-2023-52506In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2023-52507In the Linux kernel, the following vulnerability has been re…7.1
• CVE-2023-52508In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2023-52509In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2023-52510In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2023-52511In the Linux kernel, the following vulnerability has been re…5.3
• CVE-2023-52512In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2023-52513In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2023-52514Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2023-52515In the Linux kernel, the following vulnerability has been re…7.8