Vulnerabilidades em boldgrid
48 resultadosAnálise Vexday
BoldGrid apresenta 19 vulnerabilidades catalogadas, sendo 2 divulgadas nos últimos 90 dias, mas nenhuma está sob exploração ativa conhecida nem classificada como crítica. A fraqueza predominante é exposição de informação (CWE-200), sugerindo risco moderado relacionado a vazamento de dados, sem urgência de remediação imediata.
CVE-2026-32401HIGHWordPress Client Invoicing by Sprout Invoices plugin <= 20.8.9 - Local File Inclusion vulnerabilityEPSS 0.4%CVE-2025-22512MEDIUMWordPress Help Scout Plugin <= 6.5.6 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2025-31797MEDIUMWordPress Sprout Clients plugin <= 3.2 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2024-1692MEDIUMBoldGrid Easy SEO – Simple and Effective SEO <= 1.6.13 - Authenticated(Contributor+) Stored Cross-Site Scripting via Meta DescriptionEPSS 0.3%CVE-2024-2888MEDIUMWordPress Post and Page Builder by BoldGrid plugin <= 1.26.2 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-64227CRITICALWordPress Client Invoicing by Sprout Invoices plugin <= 20.8.7 - PHP Object Injection vulnerabilityEPSS 0.3%CVE-2026-57623CRITICALWordPress W3 Total Cache plugin <= 2.9.4 - Arbitrary Code Execution vulnerabilityEPSS 0.3%CVE-2025-22759MEDIUMWordPress Post and Page Builder by BoldGrid – Visual Drag and Drop Editor plugin <= 1.27.5 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-27384CRITICALWordPress W3 Total Cache plugin <= 2.9.1 - Arbitrary Code Execution vulnerabilityEPSS 0.3%CVE-2026-32484HIGHWordPress weForms plugin <= 1.6.26 - PHP Object Injection vulnerabilityEPSS 0.3%CVE-2024-4400MEDIUMPost and Page Builder by BoldGrid – Visual Drag and Drop Editor <= 1.26.4 - Authenticated (Contributer+) Stored Cross-Site ScriptingEPSS 0.3%CVE-2025-24606MEDIUMWordPress Client Invoicing by Sprout Invoices – Easy Estimates and Invoices for WordPress plugin <=20.8.1 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-3143MEDIUMTotal Upkeep <= 1.17.1 - Missing Authorization to Unauthenticated Rollback CancellationEPSS 0.3%CVE-2026-57418MEDIUMWordPress Client Invoicing by Sprout Invoices plugin <= 20.8.13 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-52712MEDIUMWordPress Post and Page Builder by BoldGrid – Visual Drag and Drop Editor <= 1.27.8 - Path Traversal VulnerabilityEPSS 0.2%CVE-2023-25480MEDIUMWordPress Post and Page Builder by BoldGrid – Visual Drag and Drop Editor Plugin <= 1.24.1 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.2%CVE-2026-39562MEDIUMWordPress Client Invoicing by Sprout Invoices plugin <= 20.8.10 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-2707MEDIUMweForms <= 1.6.27 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Hidden Field Value via REST APIEPSS 0.2%CVE-2026-25364MEDIUMWordPress Client Invoicing by Sprout Invoices plugin <= 20.8.8 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-39595MEDIUMWordPress W3 Total Cache plugin <= 2.9.1 - Broken Access Control vulnerabilityEPSS 0.2%