Boldworkplanner Bold Workplanner — known CVE vulnerabilities

Every CVE whose affected-product data names Boldworkplanner Bold Workplanner, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (9)

• CVE-2025-41098 — CVSS 7.5 (high): Insecure Direct Object Reference (IDOR) vulnerability in BOLD Workplanner in versions prior to 2.5.25 (4935b438f9b), consisting of a misuse…
• CVE-2025-41099 — CVSS 6.5 (medium): Insecure Direct Object Reference (IDOR) vulnerability in BOLD Workplanner in versions prior to 2.5.25 (4935b438f9b), consisting of a lack…
• CVE-2025-41093 — CVSS 4.3 (medium): Insecure Direct Object Reference (IDOR) vulnerability in BOLD Workplanner in versions prior to 2.5.25 (4935b438f9b), consisting of a lack…
• CVE-2025-41094 — CVSS 4.3 (medium): Insecure Direct Object Reference (IDOR) vulnerability in BOLD Workplanner in versions prior to 2.5.25 (4935b438f9b), consisting of a lack…
• CVE-2025-41091 — CVSS 4.3 (medium): Insecure Direct Object Reference (IDOR) vulnerability in BOLD Workplanner in versions prior to 2.5.25 (4935b438f9b), consisting of a lack…
• CVE-2025-41096 — CVSS 4.3 (medium): Insecure Direct Object Reference (IDOR) vulnerability in BOLD Workplanner in versions prior to 2.5.25 (4935b438f9b), consisting of a lack…
• CVE-2025-41097 — CVSS 4.3 (medium): Insecure Direct Object Reference (IDOR) vulnerability in BOLD Workplanner in versions prior to 2.5.25 (4935b438f9b), consisting of a lack…
• CVE-2025-41095 — CVSS 4.3 (medium): Insecure Direct Object Reference (IDOR) vulnerability in BOLD Workplanner in versions prior to 2.5.25 (4935b438f9b), consisting of a lack…
• CVE-2025-41092 — CVSS 4.3 (medium): Insecure Direct Object Reference (IDOR) vulnerability in BOLD Workplanner in versions prior to 2.5.25 (4935b438f9b), consisting of a lack…