Advisories · Technology
Post and Page Builder by BoldGrid.
Every CVE that names Post and Page Builder by BoldGrid among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.1 High
WordPress Post and Page Builder by BoldGrid plugin <= 1.27.14 - Cross Site Scripting (XSS) vulnerability
- Post and Page Builder by BoldGrid
- Cross-site scripting (XSS)
- CVSS 4.3 Medium
WordPress Post and Page Builder by BoldGrid plugin <= 1.27.9 - Broken Access Control vulnerability
- Post and Page Builder by BoldGrid
- Broken access control
- CVSS 4.2 Medium
WordPress Post and Page Builder by BoldGrid – Visual Drag and Drop Editor <= 1.27.8 - Path Traversal Vulnerability
- Post and Page Builder by BoldGrid
- Path traversal
- CVSS 6.4 Medium
WordPress Post and Page Builder by BoldGrid – Visual Drag and Drop Editor plugin <= 1.27.8 - Server Side Request Forgery (SSRF) Vulnerability
- Post and Page Builder by BoldGrid
- Server-side request forgery (SSRF)
- CVSS 4.3 Medium
WordPress Post and Page Builder by BoldGrid – Visual Drag and Drop Editor plugin <= 1.27.8 - Cross Site Request Forgery (CSRF) Vulnerability
- Post and Page Builder by BoldGrid
- Cross-site request forgery (CSRF)
- CVSS 6.5 Medium
WordPress Post and Page Builder by BoldGrid – Visual Drag and Drop Editor plugin <= 1.27.5 - Cross Site Scripting (XSS) vulnerability
- Post and Page Builder by BoldGrid
- Cross-site scripting (XSS)