boldgrid vulnerabilities

CVEs per yearBy the year they were published

1. 20213
2. 20232
3. 202410
4. 202518
5. 202626

Newest CVEs

• CVE-2026-120019

  W3 Total Cache <= 2.10.7 - Unauthenticated Stored Cross-Site Scripting via Comment Content via Predictable Minify Placeholder

  boldgrid · W3 Total Cache

  Medium5.4
• CVE-2026-111254

  W3 Total Cache <= 2.10.7 - Unauthenticated Stored Cross-Site Scripting via Comment Content Cached as HTML after License Expiry

  boldgrid · W3 Total Cache

  High7.2
• CVE-2026-110253

  weForms <= 1.6.28 - Unauthenticated Limited Media File Deletion via 'wpuf_files' Parameter

  boldgrid · weForms – Easy Drag & Drop Contact Form Builder For WordPress

  Medium5.4
• CVE-2026-78001

  Post and Page Builder by BoldGrid <= 1.27.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-label' Attribute

  boldgrid · Post and Page Builder by BoldGrid – Visual Drag and Drop Editor

  Medium6.4
• CVE-2026-87920

  W3 Total Cache <= 2.10.6 - Unauthenticated Stored Cross-Site Scripting via Comment Content

  boldgrid · W3 Total Cache

  High7.2
• CVE-2026-100510

  WordPress Post and Page Builder by BoldGrid plugin <= 1.27.14 - Cross Site Scripting (XSS) vulnerability

  BoldGrid · Post and Page Builder by BoldGrid

  High7.1
• CVE-2026-97078

  WordPress Client Invoicing by Sprout Invoices plugin <= 20.8.17 - Insecure Direct Object References (IDOR) vulnerability

  BoldGrid · Client Invoicing by Sprout Invoices

  Medium5.3
• CVE-2026-78438

  W3 Total Cache <= 2.10.5 - Unauthenticated Stored Cross-Site Scripting via LazyLoad Background Mutator

  boldgrid · W3 Total Cache

  High7.2
• CVE-2026-18109

  W3 Total Cache <= 2.10.3 - Unauthenticated Stored Cross-Site Scripting via Comment Author Name

  boldgrid · W3 Total Cache

  High7.2
• CVE-2026-66708

  WordPress Total Upkeep plugin <= 1.17.2 - Broken Access Control vulnerability

  BoldGrid · Total Upkeep

  High8.2