Login Request a demo
BO
Vendor
boldgrid
12 products with CVEs on record
69
CVEs
0
On KEV
5
New 30D
Products
WT
W3 Total Cache
boldgrid
9.8
23 CVEs0 on KEV1 new
CI
Client Invoicing by Sprout Invoices
BoldGrid
9.8
9 CVEs0 on KEV1 new
PA
Post and Page Builder by BoldGrid
BoldGrid
7.1
6 CVEs0 on KEV1 new
PA
Post and Page Builder by BoldGrid – Visual Drag and Drop Editor
boldgrid
6.5
4 CVEs0 on KEV1 new
WE
weForms – Easy Drag & Drop Contact Form Builder For WordPress
boldgrid
6.4
2 CVEs0 on KEV1 new
TU
Total Upkeep
BoldGrid
8.2
7 CVEs0 on KEV0 new
PA
Post And Page Builder
Boldgrid
8.8
5 CVEs0 on KEV0 new
TU
Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid
boldgrid
7.5
5 CVEs0 on KEV0 new
SC
Sprout Clients
BoldGrid
7.1
4 CVEs0 on KEV0 new
WE
weForms
BoldGrid
8.8
2 CVEs0 on KEV0 new
ES
Easy Seo
Boldgrid
5.3
1 CVEs0 on KEV0 new
HS
Help Scout
BoldGrid
4.3
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-110253
WE
weForms – Easy Drag & Drop Contact Form Builder For WordPress
boldgrid
5.4
0%
Oct 17weForms <= 1.6.28 - Unauthenticated Limited Media File Deletion via 'wpuf_files' Parameter
CVE-2026-78001
PA
Post and Page Builder by BoldGrid – Visual Drag and Drop Editor
boldgrid
6.4
0%
Oct 15Post and Page Builder by BoldGrid <= 1.27.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-label' Attribute
CVE-2026-87920
WT
W3 Total Cache
boldgrid
7.2
0%
Oct 2W3 Total Cache <= 2.10.6 - Unauthenticated Stored Cross-Site Scripting via Comment Content
CVE-2026-100510
PA
Post and Page Builder by BoldGrid
BoldGrid
7.1
0%
Sep 30WordPress Post and Page Builder by BoldGrid plugin <= 1.27.14 - Cross Site Scripting (XSS) vulnerability
CVE-2026-97078
CI
Client Invoicing by Sprout Invoices
BoldGrid
5.3
0%
Sep 30WordPress Client Invoicing by Sprout Invoices plugin <= 20.8.17 - Insecure Direct Object References (IDOR) vulnerability
CVE-2026-78438
WT
W3 Total Cache
boldgrid
7.2
0%
Sep 5W3 Total Cache <= 2.10.5 - Unauthenticated Stored Cross-Site Scripting via LazyLoad Background Mutator
CVE-2026-18109
WT
W3 Total Cache
boldgrid
7.2
0%
Aug 14W3 Total Cache <= 2.10.3 - Unauthenticated Stored Cross-Site Scripting via Comment Author Name
CVE-2026-66708
TU
Total Upkeep
BoldGrid
8.2
0%
Aug 6WordPress Total Upkeep plugin <= 1.17.2 - Broken Access Control vulnerability
CVE-2026-66695
WT
W3 Total Cache
BoldGrid
6.5
0%
Aug 6WordPress W3 Total Cache plugin <= 2.10.2 - Path Traversal vulnerability
CVE-2026-57428
SC
Sprout Clients
BoldGrid
7.1
0%
Jul 23WordPress Sprout Clients plugin <= 3.2.3 - Cross Site Scripting (XSS) vulnerability
CVE-2026-57418
CI
Client Invoicing by Sprout Invoices
BoldGrid
6.5
0%
Jul 13WordPress Client Invoicing by Sprout Invoices plugin <= 20.8.13 - Broken Access Control vulnerability
CVE-2026-9282
WT
W3 Total Cache
boldgrid
7.5
3%
Jul 11W3 Total Cache <= 2.9.4 - Unauthenticated Arbitrary File Read via 'f_array[]' Parameter
CVE-2026-57623
WT
W3 Total Cache
BoldGrid
9.0
1%
Jul 2WordPress W3 Total Cache plugin <= 2.9.4 - Arbitrary Code Execution vulnerability
CVE-2026-39595
WT
W3 Total Cache
BoldGrid
4.7
0%
Jun 17WordPress W3 Total Cache plugin <= 2.9.1 - Broken Access Control vulnerability
CVE-2026-3143
TU
Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid
boldgrid
5.3
0%
May 1Total Upkeep <= 1.17.1 - Missing Authorization to Unauthenticated Rollback Cancellation
CVE-2026-39562
CI
Client Invoicing by Sprout Invoices
BoldGrid
5.3
0%
Apr 8WordPress Client Invoicing by Sprout Invoices plugin <= 20.8.10 - Broken Access Control vulnerability
CVE-2026-5032
WT
W3 Total Cache
boldgrid
7.5
3%
Apr 2W3 Total Cache <= 2.9.3 - Unauthenticated Security Token Exposure via User-Agent Header
CVE-2026-32484
WE
weForms
BoldGrid
8.8
0%
Mar 25WordPress weForms plugin <= 1.6.26 - PHP Object Injection vulnerability
CVE-2026-32424
SC
Sprout Clients
BoldGrid
6.5
0%
Mar 13WordPress Sprout Clients plugin <= 3.2.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-32401
CI
Client Invoicing by Sprout Invoices
BoldGrid
7.2
0%
Mar 13WordPress Client Invoicing by Sprout Invoices plugin <= 20.8.9 - Local File Inclusion vulnerability
CVE-2026-2707
WE
weForms – Easy Drag & Drop Contact Form Builder For WordPress
boldgrid
6.4
0%
Mar 11weForms <= 1.6.27 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Hidden Field Value via REST API
CVE-2026-27384
WT
W3 Total Cache
BoldGrid
9.0
0%
Mar 5WordPress W3 Total Cache plugin <= 2.9.1 - Arbitrary Code Execution vulnerability
CVE-2026-25364
CI
Client Invoicing by Sprout Invoices
BoldGrid
5.3
0%
Feb 19WordPress Client Invoicing by Sprout Invoices plugin <= 20.8.8 - Broken Access Control vulnerability
CVE-2025-69345
PA
Post and Page Builder by BoldGrid
BoldGrid
4.3
0%
Jan 6WordPress Post and Page Builder by BoldGrid plugin <= 1.27.9 - Broken Access Control vulnerability
CVE-2025-69028
WE
weForms
BoldGrid
5.3
0%
Dec 30WordPress weForms plugin <= 1.6.25 - Broken Access Control vulnerability
CVE-2025-66118
SC
Sprout Clients
BoldGrid
7.1
0%
Dec 18WordPress Sprout Clients plugin <= 3.2.1 - Cross Site Scripting (XSS) vulnerability
CVE-2025-64227
CI
Client Invoicing by Sprout Invoices
BoldGrid
9.8
0%
Dec 18WordPress Client Invoicing by Sprout Invoices plugin <= 20.8.7 - PHP Object Injection vulnerability
CVE-2025-64229
CI
Client Invoicing by Sprout Invoices
BoldGrid
4.3
0%
Oct 29WordPress Client Invoicing by Sprout Invoices plugin <= 20.8.7 - Broken Access Control vulnerability
CVE-2025-52712
PA
Post and Page Builder by BoldGrid
BoldGrid
4.2
0%
Aug 14WordPress Post and Page Builder by BoldGrid – Visual Drag and Drop Editor <= 1.27.8 - Path Traversal Vulnerability
CVE-2020-36848
TU
Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid
boldgrid
7.5
2%
Jul 12Total Upkeep by BoldGrid <= 1.14.9 - Unauthenticated Backup Download
CVE-2025-52713
PA
Post and Page Builder by BoldGrid
BoldGrid
6.4
0%
Jun 20WordPress Post and Page Builder by BoldGrid – Visual Drag and Drop Editor plugin <= 1.27.8 - Server Side Request Forgery (SSRF) Vulnerability
CVE-2025-52711
PA
Post and Page Builder by BoldGrid
BoldGrid
4.3
0%
Jun 20WordPress Post and Page Builder by BoldGrid – Visual Drag and Drop Editor plugin <= 1.27.8 - Cross Site Request Forgery (CSRF) Vulnerability
CVE-2025-31797
SC
Sprout Clients
BoldGrid
6.5
0%
Apr 1WordPress Sprout Clients plugin <= 3.2 - Cross Site Scripting (XSS) vulnerability
CVE-2025-2257
TU
Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid
boldgrid
7.2
1%
Mar 26Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid <= 1.16.10 - Authenticated (Admin+) Command Injection
CVE-2024-13907
TU
Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid
boldgrid
6.5
0%
Feb 27Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid <= 1.16.8 - Authenticated (Administrator+) Server-Side Request Forgery
CVE-2025-0859
PA
Post and Page Builder by BoldGrid – Visual Drag and Drop Editor
boldgrid
6.5
1%
Feb 6Post and Page Builder by BoldGrid <= 1.27.6 - Path Traversal to Authenticated (Contributor+) Arbitrary File Read via template_via_url Function
CVE-2025-24606
CI
Client Invoicing by Sprout Invoices
BoldGrid
6.4
0%
Jan 27WordPress Client Invoicing by Sprout Invoices – Easy Estimates and Invoices for WordPress plugin <=20.8.1 - Broken Access Control vulnerability
CVE-2025-22759
PA
Post and Page Builder by BoldGrid
BoldGrid
5.4
0%
Jan 15WordPress Post and Page Builder by BoldGrid – Visual Drag and Drop Editor plugin <= 1.27.5 - Cross Site Scripting (XSS) vulnerability
CVE-2024-12008
WT
W3 Total Cache
boldgrid
7.5
2%
Jan 14W3 Total Cache <= 2.8.1 Information Exposure via Log Files
CVE-2024-12006
WT
W3 Total Cache
boldgrid
5.3
1%
Jan 14W3 Total Cache <= 2.8.1 Missing Authorization to Unauthenticated Plugin Deactivation and Extensions Activation/Deactivation
CVE-2024-12365
WT
W3 Total Cache
boldgrid
8.5
2%
Jan 14W3 Total Cache <= 2.8.1 - Authenticated (Subscriber+) Missing Authorization to Server-Side Request Forgery
CVE-2025-22512
HS
Help Scout
BoldGrid
4.3
0%
Jan 7WordPress Help Scout Plugin <= 6.5.6 - Broken Access Control vulnerability
CVE-2024-53819
CI
Client Invoicing by Sprout Invoices
BoldGrid
5.3
0%
Dec 9WordPress Client Invoicing by Sprout Invoices plugin <= 20.8.0 - Insecure Direct Object References (IDOR) vulnerability
CVE-2024-9461
TU
Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid
boldgrid
7.2
1%
Nov 26Total Upkeep <= 1.16.6 - Authenticated (Administrator+) Remote Code Execution via Backup Settings
CVE-2023-5359
WT
W3 Total Cache
boldgrid
7.5
1%
Sep 24W3 Total Cache <= 2.7.5 - Sensitive Credentials Stored in Plaintext
CVE-2024-6848
PA
Post and Page Builder by BoldGrid – Visual Drag and Drop Editor
boldgrid
5.4
0%
Jul 20Post and Page Builder by BoldGrid – Visual Drag and Drop Editor <= 1.26.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via File Upload
CVE-2024-24869
TU
Total Upkeep
Boldgrid
7.5
1%
May 17Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in BoldGrid Total Upkeep allows Relative Path Traversal.This issue affects Total…
CVE-2024-4400
PA
Post And Page Builder
Boldgrid
5.4
0%
May 16The Post and Page Builder by BoldGrid – Visual Drag and Drop Editor plguin for WordPress is vulnerable to Stored Cross-Site Scripting via an unknown parameter in versions up to,…
CVE-2024-2950
ES
Easy Seo
Boldgrid
5.3
1%
Apr 6The BoldGrid Easy SEO – Simple and Effective SEO plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.6.14 via meta information…
CVE-2024-2888
PA
Post And Page Builder
Boldgrid
5.4
0%
Mar 26Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BoldGrid Post and Page Builder by BoldGrid – Visual Drag and Drop Editor…
CVE-2023-25480
PA
Post And Page Builder
Boldgrid
8.8
0%
Oct 6Cross-Site Request Forgery (CSRF) vulnerability in BoldGrid Post and Page Builder by BoldGrid – Visual Drag and Drop Editor plugin <= 1.24.1 versions
CVE-2022-4932
TU
Total Upkeep
Boldgrid
4.3
1%
Mar 7The Total Upkeep plugin for WordPress is vulnerable to information disclosure in versions up to, and including 1.14.13
CVE-2021-24452
WT
W3 Total Cache
Boldgrid
6.1
2%
Jul 19The W3 Total Cache WordPress plugin before 2.1.5 was affected by a reflected Cross-Site Scripting (XSS) issue within the "extension" parameter in the Extensions dashboard, when…
CVE-2021-24436
WT
W3 Total Cache
Boldgrid
6.1
2%
Jul 19The W3 Total Cache WordPress plugin before 2.1.4 was vulnerable to a reflected Cross-Site Scripting (XSS) security vulnerability within the "extension" parameter in the Extensions…
CVE-2021-24427
WT
W3 Total Cache
Boldgrid
4.8
1%
Jul 12The W3 Total Cache WordPress plugin before 2.1.3 did not sanitise or escape some of its CDN settings, allowing high privilege users to use JavaScript in them, which will be output…
CVE-2013-2010
WT
W3 Total Cache
Boldgrid
9.8
74%
Feb 12WordPress W3 Total Cache Plugin 0.9.2.8 has a Remote PHP Code Execution Vulnerability
CVE-2012-6079
WT
W3 Total Cache
Boldgrid
7.5
2%
Nov 22W3 Total Cache before 0.9.2.5 exposes sensitive cached database information which allows remote attackers to download this information via their hash keys
CVE-2012-6078
WT
W3 Total Cache
Boldgrid
7.5
2%
Nov 22W3 Total Cache before 0.9.2.5 generates hash keys insecurely which allows remote attackers to predict the values of the hashes
CVE-2012-6077
WT
W3 Total Cache
Boldgrid
7.5
2%
Nov 22W3 Total Cache before 0.9.2.5 allows remote attackers to retrieve password hash information due to insecure storage of database cache files
CVE-2019-6715
WT
W3 Total Cache
Boldgrid
7.5
19%
Apr 1pub/sns.php in the W3 Total Cache plugin before 0.9.4 for WordPress allows remote attackers to read arbitrary files via the SubscribeURL field in SubscriptionConfirmation JSON…