Skip to contentBoldgrid Post And Page Builder By Boldgrid – Visual Drag And Drop Editor vulnerabilities
- boldgrid post and page builder by boldgrid – visual drag and drop editorPost and Page Builder by BoldGrid <= 1.27.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-label' AttributeCVE-2026-780016.4 Medium
- boldgrid post and page builder by boldgrid – visual drag and drop editor, post and page builder +1 morePost and Page Builder by BoldGrid <= 1.27.6 - Path Traversal to Authenticated (Contributor+) Arbitrary File Read via template_via_url FunctionCVE-2025-08596.5 Medium
- boldgrid post and page builder by boldgrid – visual drag and drop editor, post and page builder +1 morePost and Page Builder by BoldGrid – Visual Drag and Drop Editor <= 1.26.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via File UploadCVE-2024-68486.4 Medium
- boldgrid post and page builder by boldgrid – visual drag and drop editor, post and page builder +1 morePost and Page Builder by BoldGrid – Visual Drag and Drop Editor <= 1.26.4 - Authenticated (Contributer+) Stored Cross-Site ScriptingCVE-2024-44006.4 Medium
- boldgrid post and page builder by boldgrid – visual drag and drop editor, post and page builder +1 moreWordPress Post and Page Builder by BoldGrid plugin <= 1.26.2 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-28886.5 Medium
- boldgrid post and page builder by boldgrid – visual drag and drop editor, post and page builder +1 moreWordPress Post and Page Builder by BoldGrid – Visual Drag and Drop Editor Plugin <= 1.24.1 is vulnerable to Cross Site Request Forgery (CSRF)CVE-2023-254804.3 Medium