Boldgrid Post And Page Builder — known CVE vulnerabilities

Every CVE whose affected-product data names Boldgrid Post And Page Builder, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2024-2888 — CVSS 6.5 (medium): Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BoldGrid Post and Page Builder by…
• CVE-2025-0859 — CVSS 6.5 (medium): The Post and Page Builder by BoldGrid – Visual Drag and Drop Editor plugin for WordPress is vulnerable to Path Traversal in all versions…
• CVE-2024-4400 — CVSS 6.4 (medium): The Post and Page Builder by BoldGrid – Visual Drag and Drop Editor plguin for WordPress is vulnerable to Stored Cross-Site Scripting via…
• CVE-2024-6848 — CVSS 6.4 (medium): The Post and Page Builder by BoldGrid – Visual Drag and Drop Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via…
• CVE-2023-25480 — CVSS 4.3 (medium): Cross-Site Request Forgery (CSRF) vulnerability in BoldGrid Post and Page Builder by BoldGrid – Visual Drag and Drop Editor plugin <=…