Advisories · Technology
Post and Page Builder by BoldGrid – Visual Drag and Drop Editor.
Every CVE that names Post and Page Builder by BoldGrid – Visual Drag and Drop Editor among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.4 Medium
Post and Page Builder by BoldGrid <= 1.27.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-label' Attribute
- Post and Page Builder by BoldGrid – Visual Drag and Drop Editor
- Cross-site scripting (XSS)
- CVSS 6.5 Medium
Post and Page Builder by BoldGrid <= 1.27.6 - Path Traversal to Authenticated (Contributor+) Arbitrary File Read via template_via_url Function
- Post and Page Builder by BoldGrid – Visual Drag and Drop Editor
- Path traversal
- CVSS 6.4 Medium
Post and Page Builder by BoldGrid – Visual Drag and Drop Editor <= 1.26.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via File Upload
- Post and Page Builder by BoldGrid – Visual Drag and Drop Editor
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Post and Page Builder by BoldGrid – Visual Drag and Drop Editor <= 1.26.4 - Authenticated (Contributer+) Stored Cross-Site Scripting
- Post and Page Builder by BoldGrid – Visual Drag and Drop Editor
- Cross-site scripting (XSS)
- CVSS 6.5 Medium
WordPress Post and Page Builder by BoldGrid plugin <= 1.26.2 - Cross Site Scripting (XSS) vulnerability
- Post and Page Builder by BoldGrid – Visual Drag and Drop Editor
- Cross-site scripting (XSS)
- CVSS 4.3 Medium
WordPress Post and Page Builder by BoldGrid – Visual Drag and Drop Editor Plugin <= 1.24.1 is vulnerable to Cross Site Request Forgery (CSRF)
- Post and Page Builder by BoldGrid – Visual Drag and Drop Editor
- Cross-site request forgery (CSRF)