Exposición de BoldGrid

Blogs, CMS, WordPress plugins
35
score de exposición
536
sitios usan
0
en explotación
3
críticos
Análisis Vexday

O histórico de vulnerabilidades do BoldGrid soma 44 CVEs catalogadas, com 2 classificadas como críticas e nenhuma entrada no catálogo CISA KEV, indicando taxa de exploração ativa abaixo da média geral do catálogo. O tipo de falha predominante é CWE-79 (Cross-Site Scripting), padrão comum em plugins e temas WordPress que demanda atenção contínua em revisões de código e sanitização de entrada. O CVE mais relevante no momento, CVE-2024-12008, apresenta EPSS de 0,0217, sugerindo baixa probabilidade de exploração imediata, mas ainda assim merece acompanhamento dado o surgimento de 4 novas CVEs nos últimos 90 dias, indicando atividade de pesquisa recente sobre esta tecnologia.

CVEs

52 resultados
CVE-2026-25364MEDIUMWordPress Client Invoicing by Sprout Invoices plugin <= 20.8.8 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-66708HIGHWordPress Total Upkeep plugin <= 1.17.2 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-2707MEDIUMweForms <= 1.6.27 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Hidden Field Value via REST APIEPSS 0.2%CVE-2026-39562MEDIUMWordPress Client Invoicing by Sprout Invoices plugin <= 20.8.10 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-39595MEDIUMWordPress W3 Total Cache plugin <= 2.9.1 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-69028MEDIUMWordPress weForms plugin <= 1.6.25 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-52713MEDIUMWordPress Post and Page Builder by BoldGrid – Visual Drag and Drop Editor plugin <= 1.27.8 - Server Side Request Forgery (SSRF) VulnerabilityEPSS 0.2%CVE-2025-66118HIGHWordPress Sprout Clients plugin <= 3.2.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-69345MEDIUMWordPress Post and Page Builder by BoldGrid plugin <= 1.27.9 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-64229MEDIUMWordPress Client Invoicing by Sprout Invoices plugin <= 20.8.7 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-32424MEDIUMWordPress Sprout Clients plugin <= 3.2.2 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-52711MEDIUMWordPress Post and Page Builder by BoldGrid – Visual Drag and Drop Editor plugin <= 1.27.8 - Cross Site Request Forgery (CSRF) VulnerabilityEPSS 0.1%