Skip to contentBoldgrid vulnerabilities
Newest
- boldgrid client invoicing by sprout invoicesWordPress Client Invoicing by Sprout Invoices plugin <= 20.8.0 - Insecure Direct Object References (IDOR) vulnerabilityCVE-2024-538195.3 Medium
- boldgrid total upkeep – wordpress backup plugin plus restore & migrate by boldgrid, total upkeep +1 moreTotal Upkeep <= 1.16.6 - Authenticated (Administrator+) Remote Code Execution via Backup SettingsCVE-2024-94617.2 High
- boldgrid w3 total cacheW3 Total Cache <= 2.7.5 - Sensitive Credentials Stored in PlaintextCVE-2023-5359Public exploit3.7 Low
- boldgrid post and page builder by boldgrid – visual drag and drop editor, post and page builder +1 morePost and Page Builder by BoldGrid – Visual Drag and Drop Editor <= 1.26.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via File UploadCVE-2024-68486.4 Medium
- boldgrid weformsWordPress weForms plugin <= 1.6.18 - Broken Access Control vulnerabilityCVE-2023-515244.3 Medium
- boldgrid weformsWordPress weForms plugin <= 1.6.20 - Broken Access Control vulnerabilityCVE-2024-305123.7 Low
- boldgrid weformsWordPress weForms plugin <= 1.6.20 - Form Submission Restriction Bypass vulnerabilityCVE-2024-325125.3 Medium
- boldgrid total upkeepWordPress Total Upkeep plugin <= 1.15.8 - Arbitrary File Download vulnerabilityCVE-2024-248697.5 High
- boldgrid post and page builder by boldgrid – visual drag and drop editor, post and page builder +1 morePost and Page Builder by BoldGrid – Visual Drag and Drop Editor <= 1.26.4 - Authenticated (Contributer+) Stored Cross-Site ScriptingCVE-2024-44006.4 Medium
- boldgrid easy seo – simple and effective seo, easy seo +1 moreBoldGrid Easy SEO – Simple and Effective SEO <= 1.6.14 - Information ExposureCVE-2024-29505.3 Medium
- boldgrid easy seo – simple and effective seoBoldGrid Easy SEO – Simple and Effective SEO <= 1.6.13 - Authenticated(Contributor+) Stored Cross-Site Scripting via Meta DescriptionCVE-2024-16926.4 Medium
- boldgrid post and page builder by boldgrid – visual drag and drop editor, post and page builder +1 moreWordPress Post and Page Builder by BoldGrid plugin <= 1.26.2 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-28886.5 Medium
- weformspro weforms, boldgrid weforms – easy drag & drop contact form builder for wordpress +1 moreweForms <= 1.6.21 - Unauthenticated Stored Cross-Site Scripting via RefererCVE-2024-03867.2 High
- boldgrid weforms – easy drag & drop contact form builder for wordpress, weforms – easy drag & drop contact form builder for wordpress, weformspro weforms +2 moreWordPress weForms Plugin <= 1.6.17 is vulnerable to Cross Site Scripting (XSS)CVE-2023-508965.9 Medium
- boldgrid post and page builder by boldgrid – visual drag and drop editor, post and page builder +1 moreWordPress Post and Page Builder by BoldGrid – Visual Drag and Drop Editor Plugin <= 1.24.1 is vulnerable to Cross Site Request Forgery (CSRF)CVE-2023-254804.3 Medium
- boldgrid total upkeep, total upkeep – wordpress backup plugin plus restore & migrate by boldgrid +1 moreTotal Upkeep <= 1.14.13 - Missing Authorization to Authenticated (Subscriber+) Information DisclosureCVE-2022-49324.3 Medium
- weformspro weforms, boldgrid weforms – easy drag & drop contact form builder for wordpress +1 moreweForms < 1.6.14 - Admin+ Stored Cross-Site ScriptingCVE-2022-23954.8 Medium
- boldgrid w3 total cacheW3 Total Cache < 2.1.5 - Reflected XSS in Extensions Page (JS Context)CVE-2021-244526.1 Medium
- boldgrid w3 total cacheW3 Total Cache < 2.1.4 - Reflected XSS in Extensions Page (Attribute Context)CVE-2021-244366.1 Medium
- boldgrid w3 total cacheW3 Total Cache < 2.1.3 - Authenticated Stored XSSCVE-2021-244274.8 Medium
- boldgrid w3 total cache, w3 total cache plugin authors total cache plugin, automattic wp super cache +2 moreWordPress W3 Total Cache Plugin 0.9.2.8 has a Remote PHP Code Execution VulnerabilityCVE-2013-2010Public exploitEPSS 73.9%9.8 Critical
- boldgrid w3 total cache, w3 total cache +1 moreW3 Total Cache before 0.9.2.5 exposes sensitive cached database information which allows remote...CVE-2012-60797.5 High
- boldgrid w3 total cache, w3 total cache +1 moreW3 Total Cache before 0.9.2.5 generates hash keys insecurely which allows remote attackers to...CVE-2012-60787.5 High
- boldgrid w3 total cache, w3 total cache +1 moreW3 Total Cache before 0.9.2.5 allows remote attackers to retrieve password hash information due...CVE-2012-60777.5 High
- boldgrid w3 total cachepub/sns.php in the W3 Total Cache plugin before 0.9.4 for WordPress allows remote attackers to...CVE-2019-6715Public exploitEPSS 19.4%7.5 High
- boldgrid w3 total cacheThe W3 Total Cache plugin before 0.9.4.1 for WordPress does not properly handle empty nonces,...CVE-2014-94146.8 Medium
- boldgrid w3 total cacheCross-site scripting (XSS) vulnerability in the W3 Total Cache plugin before 0.9.4.1 for...CVE-2014-87244.3 Medium