# Post and Page Builder by BoldGrid.

Every CVE that names Post and Page Builder by BoldGrid among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [WordPress Post and Page Builder by BoldGrid plugin <= 1.27.14 - Cross Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2026-100510.md)
  `CVE-2026-100510` · CVE record: BoldGrid Post and Page Builder by BoldGrid · CVSS 7.1 High · Not analysed yet · Published 30 Sept 2026 · Tags: Cross-site scripting (XSS)
- [WordPress Post and Page Builder by BoldGrid plugin <= 1.27.9 - Broken Access Control vulnerability](https://agentprime.io/advisories/CVE-2025-69345.md)
  `CVE-2025-69345` · CVE record: BoldGrid Post and Page Builder by BoldGrid · CVSS 4.3 Medium · Not analysed yet · Published 6 Jan 2026 · Tags: Broken access control
- [WordPress Post and Page Builder by BoldGrid – Visual Drag and Drop Editor <= 1.27.8 - Path Traversal Vulnerability](https://agentprime.io/advisories/CVE-2025-52712.md)
  `CVE-2025-52712` · CVE record: BoldGrid Post and Page Builder by BoldGrid · CVSS 4.2 Medium · Not analysed yet · Published 14 Aug 2025 · Tags: Path traversal
- [WordPress Post and Page Builder by BoldGrid – Visual Drag and Drop Editor plugin <= 1.27.8 - Server Side Request Forgery (SSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-52713.md)
  `CVE-2025-52713` · CVE record: BoldGrid Post and Page Builder by BoldGrid · CVSS 6.4 Medium · Not analysed yet · Published 20 Jun 2025 · Tags: Server-side request forgery (SSRF)
- [WordPress Post and Page Builder by BoldGrid – Visual Drag and Drop Editor plugin <= 1.27.8 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-52711.md)
  `CVE-2025-52711` · CVE record: BoldGrid Post and Page Builder by BoldGrid · CVSS 4.3 Medium · Not analysed yet · Published 20 Jun 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Post and Page Builder by BoldGrid – Visual Drag and Drop Editor plugin <= 1.27.5 - Cross Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2025-22759.md)
  `CVE-2025-22759` · CVE record: BoldGrid Post and Page Builder by BoldGrid · CVSS 6.5 Medium · Not analysed yet · Published 15 Jan 2025 · Tags: Cross-site scripting (XSS)

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=post-and-page-builder-by-boldgrid>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/post-and-page-builder-by-boldgrid/>. Everything for agents: <https://agentprime.io/llms.txt>.