Resources /
WordPress Plugins /
Essential Grid
PLUGIN SECURITY
Is Essential Grid safe?
Known vulnerabilities, PHP compatibility and safer alternatives for the Essential Grid WordPress plugin — checked against WP Clinic's local security database.
What this plugin does
Maintenance status
Known vulnerabilities
2 known CVEs on file for Essential Grid.
Reported between 2023 and 2023.
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2023-47771
|
Essential Grid Portfolio – Photo Gallery [essential-grid] < 3.0.19 (closed) |
Missing Authorization |
High
8.3
|
< 3.0.19
|
3.0.19 |
2023-11-14 |
—
|
|
CVE-2023-47684
|
Essential Grid Portfolio – Photo Gallery [essential-grid] < 3.1.1 (closed) |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
High
7.1
|
< 3.1.1
|
3.1.1 |
2023-11-09 |
—
|
CVE-2023-47771
Update the WordPress Essential Grid plugin to the latest available version (at least 3.0.19).
Rafie Muhammad (Patchstack) discovered and reported this Broken Access Control vulnerability in WordPress Essential Grid Plugin. A broken access control issue refers to a missing authorization, authentication or nonce token check in a function that could lead to an unprivileged user to executing a certain higher privileged action. This vulnerability has been fixed in version 3.0.19.
Source:
Patchstack
CVE-2023-47684
Update the WordPress Essential Grid plugin to the latest available version (at least 3.1.1).
Rafie Muhammad (Patchstack) discovered and reported this Cross Site Scripting (XSS) vulnerability in WordPress Essential Grid Plugin. This could allow a malicious actor to inject malicious scripts, such as redirects, advertisements, and other HTML payloads into your website which will be executed when guests visit your site. This vulnerability has been fixed in version 3.1.1.
Source:
Patchstack
How to fix it
Update this plugin to the latest release from wordpress.org — each CVE above lists the exact release that fixed it ("Fixed in") when one is on file.
This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.