What’s Vulnerable › Products
boldgrid Post and Page Builder by BoldGrid – Visual Drag and Drop Editor vulnerabilities
6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.
Latest boldgrid Post and Page Builder by BoldGrid – Visual Drag and Drop Editor vulnerabilities
- CVE-2026-78001 — Post and Page Builder by BoldGrid <= 1.27.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-label' Attribute (CVSS 6.4)
- CVE-2025-0859 — Post and Page Builder by BoldGrid <= 1.27.6 - Path Traversal to Authenticated (Contributor+) Arbitrary File Read via template_via_url Function (CVSS 6.5)
- CVE-2024-6848 — Post and Page Builder by BoldGrid – Visual Drag and Drop Editor <= 1.26.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via File Upload (CVSS 5.4)
- CVE-2024-4400 — Post and Page Builder by BoldGrid – Visual Drag and Drop Editor <= 1.26.4 - Authenticated (Contributer+) Stored Cross-Site Scripting (CVSS 5.4)
- CVE-2024-2888 — WordPress Post and Page Builder by BoldGrid plugin <= 1.26.2 - Cross Site Scripting (XSS) vulnerability (CVSS 5.4)
- CVE-2023-25480 — WordPress Post and Page Builder by BoldGrid – Visual Drag and Drop Editor Plugin <= 1.24.1 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 8.8)