Boldgrid vulnerabilities

Products

• W3 Total Cache 22
• W3 Total Cache 14
• Client Invoicing By Sprout Invoices 9
• Post And Page Builder By Boldgrid 6
• Post And Page Builder By Boldgrid – Visual Drag And Drop Editor 6
• Total Upkeep 6
• Total Upkeep – Wordpress Backup Plugin Plus Restore & Migrate By Boldgrid 6
• Weforms 6
• Post And Page Builder 5
• Weforms – Easy Drag & Drop Contact Form Builder For Wordpress 5
• Sprout Clients 4
• Total Upkeep 3
• Easy Seo – Simple And Effective Seo 2

Newest

• boldgrid w3 total cache W3 Total Cache <= 2.10.7 - Unauthenticated Stored Cross-Site Scripting via Comment Content via Predictable Minify Placeholder CVE-2026-120019 5.4 MediumOctober 31, 2026
• boldgrid w3 total cache W3 Total Cache <= 2.10.7 - Unauthenticated Stored Cross-Site Scripting via Comment Content Cached as HTML after License Expiry CVE-2026-111254 7.2 HighOctober 31, 2026
• bold grid w3 total cache WordPress W3 Total Cache plugin <= 2.10.7 - Cross Site Scripting (XSS) vulnerability CVE-2026-114178 7.1 HighOctober 24, 2026
• bold grid weforms WordPress weForms plugin <= 1.6.28 - Arbitrary File Deletion vulnerability CVE-2026-111833 7.5 HighOctober 21, 2026
• boldgrid weforms – easy drag & drop contact form builder for wordpress weForms <= 1.6.28 - Unauthenticated Limited Media File Deletion via 'wpuf_files' Parameter CVE-2026-110253 5.4 MediumOctober 17, 2026
• boldgrid post and page builder by boldgrid – visual drag and drop editor Post and Page Builder by BoldGrid <= 1.27.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-label' Attribute CVE-2026-78001 6.4 MediumOctober 15, 2026
• boldgrid w3 total cache W3 Total Cache < 2.10.6 - Author+ Path Traversal via CDN Media Library Import CVE-2026-107321 5.4 MediumOctober 10, 2026
• boldgrid w3 total cache W3 Total Cache <= 2.10.6 - Unauthenticated Stored Cross-Site Scripting via Comment Content CVE-2026-87920 7.2 HighOctober 2, 2026
• boldgrid post and page builder by boldgrid WordPress Post and Page Builder by BoldGrid plugin <= 1.27.14 - Cross Site Scripting (XSS) vulnerability CVE-2026-100510 7.1 HighSeptember 30, 2026
• boldgrid client invoicing by sprout invoices WordPress Client Invoicing by Sprout Invoices plugin <= 20.8.17 - Insecure Direct Object References (IDOR) vulnerability CVE-2026-97078 5.3 MediumSeptember 30, 2026
• boldgrid w3 total cache W3 Total Cache <= 2.10.5 - Unauthenticated Stored Cross-Site Scripting via LazyLoad Background Mutator CVE-2026-78438 7.2 HighSeptember 5, 2026
• boldgrid w3 total cache W3 Total Cache < 2.10.5 - Unauthenticated Arbitrary Directory File Write and .htaccess Overwrite via Path Traversal in the Page Cache Key CVE-2026-18051 10.0 CriticalAugust 19, 2026
• boldgrid w3 total cache W3 Total Cache <= 2.10.3 - Unauthenticated Stored Cross-Site Scripting via Comment Author Name CVE-2026-18109 7.2 HighAugust 14, 2026
• boldgrid total upkeep Total Upkeep < 1.17.3 - Unauthenticated Sensitive Data Disclosure and Forced Site Restore via Predictable cron_secret CVE-2026-16253 7.5 HighAugust 12, 2026
• boldgrid total upkeep WordPress Total Upkeep plugin <= 1.17.2 - Broken Access Control vulnerability CVE-2026-66708 8.2 HighAugust 6, 2026
• boldgrid w3 total cache WordPress W3 Total Cache plugin <= 2.10.2 - Path Traversal vulnerability CVE-2026-66695 6.5 MediumAugust 6, 2026
• boldgrid sprout clients WordPress Sprout Clients plugin <= 3.2.3 - Cross Site Scripting (XSS) vulnerability CVE-2026-57428 7.1 HighJuly 23, 2026
• boldgrid client invoicing by sprout invoices WordPress Client Invoicing by Sprout Invoices plugin <= 20.8.13 - Broken Access Control vulnerability CVE-2026-57418 6.5 MediumJuly 13, 2026
• boldgrid w3 total cache W3 Total Cache <= 2.9.4 - Unauthenticated Arbitrary File Read via 'f_array[]' Parameter CVE-2026-9282 7.5 HighJuly 11, 2026
• boldgrid w3 total cache WordPress W3 Total Cache plugin <= 2.9.4 - Arbitrary Code Execution vulnerability CVE-2026-57623 9.0 CriticalJuly 2, 2026
• boldgrid w3 total cache WordPress W3 Total Cache plugin <= 2.9.1 - Broken Access Control vulnerability CVE-2026-39595 4.7 MediumJune 17, 2026
• boldgrid total upkeep – wordpress backup plugin plus restore & migrate by boldgrid Total Upkeep <= 1.17.1 - Missing Authorization to Unauthenticated Rollback Cancellation CVE-2026-3143 Public exploit 5.3 MediumMay 1, 2026
• boldgrid client invoicing by sprout invoices WordPress Client Invoicing by Sprout Invoices plugin <= 20.8.10 - Broken Access Control vulnerability CVE-2026-39562 5.3 MediumApril 8, 2026
• boldgrid w3 total cache W3 Total Cache <= 2.9.3 - Unauthenticated Security Token Exposure via User-Agent Header CVE-2026-5032 7.5 HighApril 2, 2026
• boldgrid weforms WordPress weForms plugin <= 1.6.26 - PHP Object Injection vulnerability CVE-2026-32484 8.8 HighMarch 25, 2026
• boldgrid sprout clients WordPress Sprout Clients plugin <= 3.2.2 - Cross Site Scripting (XSS) vulnerability CVE-2026-32424 6.5 MediumMarch 13, 2026
• boldgrid client invoicing by sprout invoices WordPress Client Invoicing by Sprout Invoices plugin <= 20.8.9 - Local File Inclusion vulnerability CVE-2026-32401 7.2 HighMarch 13, 2026
• boldgrid weforms – easy drag & drop contact form builder for wordpress weForms <= 1.6.27 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Hidden Field Value via REST API CVE-2026-2707 6.4 MediumMarch 11, 2026
• boldgrid w3 total cache WordPress W3 Total Cache plugin <= 2.9.1 - Arbitrary Code Execution vulnerability CVE-2026-27384 Public exploit 9.0 CriticalMarch 5, 2026
• boldgrid client invoicing by sprout invoices WordPress Client Invoicing by Sprout Invoices plugin <= 20.8.8 - Broken Access Control vulnerability CVE-2026-25364 5.3 MediumFebruary 19, 2026
• boldgrid post and page builder by boldgrid WordPress Post and Page Builder by BoldGrid plugin <= 1.27.9 - Broken Access Control vulnerability CVE-2025-69345 4.3 MediumJanuary 6, 2026
• boldgrid weforms WordPress weForms plugin <= 1.6.25 - Broken Access Control vulnerability CVE-2025-69028 5.3 MediumDecember 30, 2025
• boldgrid sprout clients WordPress Sprout Clients plugin <= 3.2.1 - Cross Site Scripting (XSS) vulnerability CVE-2025-66118 7.1 HighDecember 18, 2025
• boldgrid client invoicing by sprout invoices WordPress Client Invoicing by Sprout Invoices plugin <= 20.8.7 - PHP Object Injection vulnerability CVE-2025-64227 9.8 CriticalDecember 18, 2025
• boldgrid w3 total cache W3 Total Cache < 2.8.13 - Unauthenticated Command Injection CVE-2025-9501 Public exploit EPSS 22.1% 9.0 CriticalNovember 17, 2025
• boldgrid client invoicing by sprout invoices WordPress Client Invoicing by Sprout Invoices plugin <= 20.8.7 - Broken Access Control vulnerability CVE-2025-64229 4.3 MediumOctober 29, 2025
• boldgrid post and page builder by boldgrid WordPress Post and Page Builder by BoldGrid – Visual Drag and Drop Editor <= 1.27.8 - Path Traversal Vulnerability CVE-2025-52712 4.2 MediumAugust 14, 2025
• boldgrid total upkeep – wordpress backup plugin plus restore & migrate by boldgrid, total upkeep +1 more Total Upkeep by BoldGrid <= 1.14.9 - Unauthenticated Backup Download CVE-2020-36848 7.5 HighJuly 12, 2025
• boldgrid post and page builder by boldgrid WordPress Post and Page Builder by BoldGrid – Visual Drag and Drop Editor plugin <= 1.27.8 - Server Side Request Forgery (SSRF) Vulnerability CVE-2025-52713 6.4 MediumJune 20, 2025
• boldgrid post and page builder by boldgrid WordPress Post and Page Builder by BoldGrid – Visual Drag and Drop Editor plugin <= 1.27.8 - Cross Site Request Forgery (CSRF) Vulnerability CVE-2025-52711 4.3 MediumJune 20, 2025
• boldgrid sprout clients WordPress Sprout Clients plugin <= 3.2 - Cross Site Scripting (XSS) vulnerability CVE-2025-31797 6.5 MediumApril 1, 2025
• boldgrid total upkeep – wordpress backup plugin plus restore & migrate by boldgrid, total upkeep +1 more Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid <= 1.16.10 - Authenticated (Admin+) Command Injection CVE-2025-2257 7.2 HighMarch 26, 2025
• boldgrid total upkeep – wordpress backup plugin plus restore & migrate by boldgrid, total upkeep +1 more Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid <= 1.16.8 - Authenticated (Administrator+) Server-Side Request Forgery CVE-2024-13907 4.9 MediumFebruary 27, 2025
• boldgrid post and page builder by boldgrid – visual drag and drop editor, post and page builder +1 more Post and Page Builder by BoldGrid <= 1.27.6 - Path Traversal to Authenticated (Contributor+) Arbitrary File Read via template_via_url Function CVE-2025-0859 6.5 MediumFebruary 6, 2025
• boldgrid client invoicing by sprout invoices WordPress Client Invoicing by Sprout Invoices – Easy Estimates and Invoices for WordPress plugin <=20.8.1 - Broken Access Control vulnerability CVE-2025-24606 6.4 MediumJanuary 27, 2025
• boldgrid post and page builder by boldgrid, post and page builder by boldgrid - visual drag and drop editor +1 more WordPress Post and Page Builder by BoldGrid – Visual Drag and Drop Editor plugin <= 1.27.5 - Cross Site Scripting (XSS) vulnerability CVE-2025-22759 6.5 MediumJanuary 15, 2025
• boldgrid w3 total cache W3 Total Cache <= 2.8.1 Information Exposure via Log Files CVE-2024-12008 Public exploit 5.3 MediumJanuary 14, 2025
• boldgrid w3 total cache W3 Total Cache <= 2.8.1 - Authenticated (Subscriber+) Missing Authorization to Server-Side Request Forgery CVE-2024-12365 Public exploit 8.5 HighJanuary 14, 2025
• boldgrid w3 total cache W3 Total Cache <= 2.8.1 Missing Authorization to Unauthenticated Plugin Deactivation and Extensions Activation/Deactivation CVE-2024-12006 5.3 MediumJanuary 14, 2025
• boldgrid help scout WordPress Help Scout Plugin <= 6.5.6 - Broken Access Control vulnerability CVE-2025-22512 4.3 MediumJanuary 7, 2025
• Show olderLoading…