Skip to contentBoldgrid Post And Page Builder By Boldgrid vulnerabilities
- boldgrid post and page builder by boldgrid – visual drag and drop editorPost and Page Builder by BoldGrid <= 1.27.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-label' AttributeCVE-2026-780016.4 Medium
- boldgrid post and page builder by boldgridWordPress Post and Page Builder by BoldGrid plugin <= 1.27.14 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-1005107.1 High
- boldgrid post and page builder by boldgridWordPress Post and Page Builder by BoldGrid plugin <= 1.27.9 - Broken Access Control vulnerabilityCVE-2025-693454.3 Medium
- boldgrid post and page builder by boldgridWordPress Post and Page Builder by BoldGrid – Visual Drag and Drop Editor <= 1.27.8 - Path Traversal VulnerabilityCVE-2025-527124.2 Medium
- boldgrid post and page builder by boldgridWordPress Post and Page Builder by BoldGrid – Visual Drag and Drop Editor plugin <= 1.27.8 - Server Side Request Forgery (SSRF) VulnerabilityCVE-2025-527136.4 Medium
- boldgrid post and page builder by boldgridWordPress Post and Page Builder by BoldGrid – Visual Drag and Drop Editor plugin <= 1.27.8 - Cross Site Request Forgery (CSRF) VulnerabilityCVE-2025-527114.3 Medium
- boldgrid post and page builder by boldgrid – visual drag and drop editor, post and page builder +1 morePost and Page Builder by BoldGrid <= 1.27.6 - Path Traversal to Authenticated (Contributor+) Arbitrary File Read via template_via_url FunctionCVE-2025-08596.5 Medium
- boldgrid post and page builder by boldgrid, post and page builder by boldgrid - visual drag and drop editor +1 moreWordPress Post and Page Builder by BoldGrid – Visual Drag and Drop Editor plugin <= 1.27.5 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-227596.5 Medium
- boldgrid post and page builder by boldgrid – visual drag and drop editor, post and page builder +1 morePost and Page Builder by BoldGrid – Visual Drag and Drop Editor <= 1.26.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via File UploadCVE-2024-68486.4 Medium
- boldgrid post and page builder by boldgrid – visual drag and drop editor, post and page builder +1 morePost and Page Builder by BoldGrid – Visual Drag and Drop Editor <= 1.26.4 - Authenticated (Contributer+) Stored Cross-Site ScriptingCVE-2024-44006.4 Medium
- boldgrid post and page builder by boldgrid – visual drag and drop editor, post and page builder +1 moreWordPress Post and Page Builder by BoldGrid plugin <= 1.26.2 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-28886.5 Medium
- boldgrid post and page builder by boldgrid – visual drag and drop editor, post and page builder +1 moreWordPress Post and Page Builder by BoldGrid – Visual Drag and Drop Editor Plugin <= 1.24.1 is vulnerable to Cross Site Request Forgery (CSRF)CVE-2023-254804.3 Medium