PatchSiren

Themeone CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM ThemeOne CVE published 2026-03-25

CVE-2026-24370

A vulnerability in ThemeOne The Grid allows Stored XSS. This issue affects The Grid: from n/a through 2.8.0. The vulnerability allows for Stored XSS, which can be triggered by user-input data that is not properly sanitized. Users of the plugin should assess their exposure and implement mitigations. The CVE record was published on 2026-03-25T17:16:37.527Z and last modified on 2026-09-01T22:17:11.157Z. The [truncated]

MEDIUM ThemeOne CVE published 2026-01-22

CVE-2026-24368

AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-01-22T17:16:40.303Z and has not been modified since then. CVE-2026-24368 is a Medium-severity vulnerability in The Grid plugin, affecting versions up to 2.8.0. The vulnerability is described as a Missing Authorization issue, which could potentially allow exploiting incorrectly configured access control [truncated]