GCVE - cpe:2.3:a:ymc-22:filter_\&

Approved changes feed: RSS · Atom

cpe:2.3:a:ymc-22:filter_\&_grids:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Ymc 22 (`282ec8be-0678-5e19-9429-facd2410239f`)
Product	Filter & Grids (`3205488e-ebad-5a01-89df-f5aa831f2ed4`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-6164`	vulnerable	2026-06-08 06:58:18.056982	Filter & Grids < 2.8.33 - Unauthenticated LFI The Filter & Grids WordPress plugin before 2.8.33 is vulnerable to Local File Inclusion via the post_layout parameter. This makes it possible for an unauthenticated attacker to include and execute PHP files on the server, allowing the execution of any PHP code in those files. Published: 2024-07-18T06:00:04.048Z Updated: 2024-08-01T21:33:04.599Z Open on db.gcve.eu Reference links https://wpscan.com/vulnerability/40bd880e-67a1-4180-b197-8dcadaa0ace4/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-39664`	vulnerable	2026-06-08 06:41:51.303350	WordPress Filter & Grids plugin <= 2.8.32 - Broken Authentication vulnerability HIGH (7.3) Missing Authorization vulnerability in YMC Filter & Grids allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Filter & Grids: from n/a through 2.8.33. Published: 2024-11-01T14:17:51.167Z Updated: 2026-04-28T16:10:08.578Z Open on db.gcve.eu Reference links https://patchstack.com/database/vulnerability/ymc-smart-filter/wordpress-filter-grids-plugin-2-8-32-broken-authentication-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open this panel to browse, search, copy or download the JSON record.