Post and Page Builder by BoldGrid – Visual Drag and Drop Editor

Уязвимости

• CVE-2023-25480без авторизации · нужен клик≤ 1.24.1

  WordPress Post and Page Builder by BoldGrid – Visual Drag and Drop Editor Plugin <= 1.24.1 is vulnerable to Cross Site Request Forgery (CSRF)

  Высокий 8.8

• CVE-2026-100510без авторизации · нужен клик≤ 1.27.14

  WordPress Post and Page Builder by BoldGrid plugin <= 1.27.14 - Cross Site Scripting (XSS) vulnerability

  Высокий 7.1

• CVE-2025-0859участник+≤ 1.27.6

  Post and Page Builder by BoldGrid <= 1.27.6 - Path Traversal to Authenticated (Contributor+) Arbitrary File Read via template_via_url Function

  Средний 6.5

• CVE-2025-52713нужен вход≤ 1.27.8

  WordPress Post and Page Builder by BoldGrid – Visual Drag and Drop Editor plugin <= 1.27.8 - Server Side Request Forgery (SSRF) Vulnerability

  Средний 6.4

• CVE-2025-22759нужен вход≤ 1.27.5

  WordPress Post and Page Builder by BoldGrid – Visual Drag and Drop Editor plugin <= 1.27.5 - Cross Site Scripting (XSS) vulnerability

  Средний 5.4

• CVE-2024-2888нужен вход≤ 1.26.2

  WordPress Post and Page Builder by BoldGrid plugin <= 1.26.2 - Cross Site Scripting (XSS) vulnerability

  Средний 5.4

• CVE-2024-6848участник+≤ 1.26.6

  Post and Page Builder by BoldGrid – Visual Drag and Drop Editor <= 1.26.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via File Upload

  Средний 5.4

• CVE-2025-52711без авторизации · нужен клик≤ 1.27.8

  WordPress Post and Page Builder by BoldGrid – Visual Drag and Drop Editor plugin <= 1.27.8 - Cross Site Request Forgery (CSRF) Vulnerability

  Средний 4.3

• CVE-2025-69345нужен вход≤ 1.27.9

  WordPress Post and Page Builder by BoldGrid plugin <= 1.27.9 - Broken Access Control vulnerability

  Средний 4.3

• CVE-2025-52712нужен вход≤ 1.27.8

  WordPress Post and Page Builder by BoldGrid – Visual Drag and Drop Editor <= 1.27.8 - Path Traversal Vulnerability

  Средний 4.2