[ Vendor · 5 CVEs ]
boldgrid
CVEs affecting boldgrid published in the last 30 days, plus any boldgrid CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-110253 | 17 Oct 2026 | CVSS 5.4 | boldgrid weForms – Easy Drag & Drop Contact Form Builder For WordPressThe weForms – Easy Drag & Drop Contact Form Builder For WordPress plugin for WordPress is vulnerable to limited media file deletion due to… | |
| CVE-2026-78001 | 15 Oct 2026 | CVSS 6.4 | boldgrid Post and Page Builder by BoldGrid – Visual Drag and Drop EditorThe Post and Page Builder by BoldGrid – Visual Drag and Drop Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Table… | |
| CVE-2026-87920 | 2 Oct 2026 | CVSS 7.2 | boldgrid W3 Total CacheThe W3 Total Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via Output-Buffer Regex Rewrite in all… | |
| CVE-2026-100510 | 30 Sep 2026 | CVSS 7.1 | BoldGrid Post and Page Builder by BoldGridUnauthenticated Cross Site Scripting (XSS) in Post and Page Builder by BoldGrid <= 1.27.14 versions. | |
| CVE-2026-97078 | 30 Sep 2026 | CVSS 5.3 | BoldGrid Client Invoicing by Sprout InvoicesUnauthenticated Insecure Direct Object References (IDOR) in Client Invoicing by Sprout Invoices <= 20.8.17 versions. |