CVE-2026-94169
10 CRITICALPublished 2026-10-16 · Updated 2026-10-16
AI risk analysis
- Summary
- The Grid plugin contains a code injection vulnerability that allows remote attackers to execute arbitrary commands on the server. This critical flaw can lead to complete system compromise.
- Exploitability
- Exploitation is straightforward with no special preconditions required, as the vulnerability allows direct command injection in the plugin's functionality.
- Blast radius
- An exploited vulnerability could allow attackers to gain full control of the affected WordPress site, potentially leading to data breaches, defacement, or use as a launchpad for further attacks.
- Detection
- No reliable host or network indicator is derivable from the published description.
- Prioritized remediation
- Upgrade to version 2.8.2 or later to remediate this critical code injection vulnerability.
rcewordpressplugincode-injection
Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.
NVD description
Improper Control of Generation of Code ('Code Injection') vulnerability in Theme-one The Grid the-grid allows Command Injection.This issue affects The Grid: from n/a through 2.8.1.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Weaknesses
CWE-94
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- HIGHCVE-2026-39776
- HIGHCVE-2026-92174
- HIGHCVE-2024-42002PoC
- HIGHCVE-2026-100856PoC
- HIGHCVE-2026-103071
- HIGHCVE-2026-103572
- CRITICALCVE-2026-105135PoC
- CRITICALCVE-2026-105903
Related by shared AI tags and CWE weakness class. Browse the full archive.