Vulnerabilities in BoldGrid

50 results
Vexday analysis

BoldGrid apresenta 29 vulnerabilidades no histórico, com 3 classificadas como críticas, mas nenhuma sob ataque ativo confirmado no momento. A fraqueza dominante (CWE-862: Autorização Inadequada) sugere problemas de controle de acesso, enquanto as 4 vulnerabilidades publicadas nos últimos 90 dias indicam descobertas recentes que demandam monitoramento contínuo.

CVE-2026-32401HIGHWordPress Client Invoicing by Sprout Invoices plugin <= 20.8.9 - Local File Inclusion vulnerabilityEPSS 0.4%CVE-2025-22512MEDIUMWordPress Help Scout Plugin <= 6.5.6 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2025-31797MEDIUMWordPress Sprout Clients plugin <= 3.2 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2024-2888MEDIUMWordPress Post and Page Builder by BoldGrid plugin <= 1.26.2 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2024-1692MEDIUMBoldGrid Easy SEO – Simple and Effective SEO <= 1.6.13 - Authenticated(Contributor+) Stored Cross-Site Scripting via Meta DescriptionEPSS 0.3%CVE-2025-64227CRITICALWordPress Client Invoicing by Sprout Invoices plugin <= 20.8.7 - PHP Object Injection vulnerabilityEPSS 0.3%CVE-2026-57623CRITICALWordPress W3 Total Cache plugin <= 2.9.4 - Arbitrary Code Execution vulnerabilityEPSS 0.3%CVE-2025-22759MEDIUMWordPress Post and Page Builder by BoldGrid – Visual Drag and Drop Editor plugin <= 1.27.5 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-27384CRITICALWordPress W3 Total Cache plugin <= 2.9.1 - Arbitrary Code Execution vulnerabilityEPSS 0.3%CVE-2026-32484HIGHWordPress weForms plugin <= 1.6.26 - PHP Object Injection vulnerabilityEPSS 0.3%CVE-2026-66695MEDIUMWordPress W3 Total Cache plugin <= 2.10.2 - Path Traversal vulnerabilityEPSS 0.3%CVE-2024-4400MEDIUMPost and Page Builder by BoldGrid – Visual Drag and Drop Editor <= 1.26.4 - Authenticated (Contributer+) Stored Cross-Site ScriptingEPSS 0.3%CVE-2025-24606MEDIUMWordPress Client Invoicing by Sprout Invoices – Easy Estimates and Invoices for WordPress plugin <=20.8.1 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-3143MEDIUMTotal Upkeep <= 1.17.1 - Missing Authorization to Unauthenticated Rollback CancellationEPSS 0.3%CVE-2026-57418MEDIUMWordPress Client Invoicing by Sprout Invoices plugin <= 20.8.13 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-66708HIGHWordPress Total Upkeep plugin <= 1.17.2 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-52712MEDIUMWordPress Post and Page Builder by BoldGrid – Visual Drag and Drop Editor <= 1.27.8 - Path Traversal VulnerabilityEPSS 0.2%CVE-2026-25364MEDIUMWordPress Client Invoicing by Sprout Invoices plugin <= 20.8.8 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2023-25480MEDIUMWordPress Post and Page Builder by BoldGrid – Visual Drag and Drop Editor Plugin <= 1.24.1 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.2%CVE-2026-2707MEDIUMweForms <= 1.6.27 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Hidden Field Value via REST APIEPSS 0.2%