Live › vulnerability › CVE-2026-94169
Go to dashboardThe Grid, a WordPress theme by Theme-one, has a code injection flaw that allows command injection. An attacker who can reach the site could run operating system commands on the server.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
No product ranges from the sources yet.
Check the installed theme version in WordPress admin under Appearance > Themes, or in the style.css header of the theme directory.
Update The Grid to a version later than 2.8.1 if one is available; the sources do not name a fixed version.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Improper Control of Generation of Code ('Code Injection') vulnerability in Theme-one The Grid the-grid allows Command Injection.This issue affects The Grid: from n/a through 2.8.1.
This page as .md · .json · in your agent: get_signal("CVE-2026-94169")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.