Read the docs

BoldGrid

Records68All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high27CVSS 7.0–8.9

Exploited now

BoldGrid records in CISA KEV

No BoldGrid vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
W3 Total Cache 14 records HIGH Total Upkeep 6 records MEDIUM Post And Page Builder 5 records LOW Easy Seo 1 record LOW Post And Page Builder By Boldgrid - Visual Drag And Drop Editor 1 record LOW

Records

68 records

TI-2025-39670 CVE-2025-64227 · GHSA-rmjr-p44g-h485

WordPress Client Invoicing by Sprout Invoices plugin <= 20.8.7 - PHP Object Injection vulnerability

Priority MEDIUM 49

Deserialization of Untrusted Data vulnerability in BoldGrid Client Invoicing by Sprout Invoices sprout-invoices allows Object Injection.This issue affects Client Invoicing by Sprout Invoices: from n/a through <= 20.8.7.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00381 Published 2025-12-18 No fix listed CWE-502
TI-2024-11141 CVE-2024-12008 · GHSA-crhx-c2pr-jp56

W3 Total Cache <= 2.8.1 Information Exposure via Log Files

Priority MEDIUM 43

The W3 Total Cache plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.8.1 through the publicly exposed debug log file.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02371 Published 2025-01-14 No fix listed CWE-200
TI-2020-18983 CVE-2020-36848 · GHSA-qcmh-3f59-hmv7

Total Upkeep by BoldGrid <= 1.14.9 - Unauthenticated Backup Download

Priority MEDIUM 43

The Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.14.9 via the env-info.php and res…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01877 Published 2025-07-12 No fix listed CWE-200
TI-2026-21800 CVE-2026-27384 · GHSA-g2g2-5q7p-hmf2

WordPress W3 Total Cache plugin <= 2.9.1 - Arbitrary Code Execution vulnerability

Priority MEDIUM 41

Improper Validation of Specified Quantity in Input vulnerability in BoldGrid W3 Total Cache w3-total-cache allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects W3 Total Cache: from n/a throu…

CVSS 3.1CRITICAL 9.0 Network No auth No interaction EPSS 0.00356 Published 2026-03-05 No fix listed CWE-1284
TI-2024-16383 CVE-2024-24869 · GHSA-82rx-89fp-4w49

WordPress Total Upkeep plugin <= 1.15.8 - Arbitrary File Download vulnerability

Priority MEDIUM 40

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in BoldGrid Total Upkeep allows Relative Path Traversal.This issue affects Total Upkeep: from n/a through 1.15.8.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00658 Published 2024-05-17 No fix listed CWE-22
TI-2026-78798 CVE-2026-111833 · GHSA-fpp7-c629-jrj6

Path traversal in WordPress weForms plugin enables file deletion

Priority LOW 39

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Bold Grid weForms weforms allows Path Traversal.This issue affects weForms: from n/a through 1.6.28.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00479 Published 2026-10-21 No fix listed CWE-22
TI-2012-05043 CVE-2012-6079 · GHSA-cxp7-rf23-r7xf

Information disclosure in W3 Total Cache

Priority LOW 37

W3 Total Cache before 0.9.2.5 exposes sensitive cached database information which allows remote attackers to download this information via their hash keys.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02134 Published 2019-11-22 No fix listed CWE-200
TI-2012-05042 CVE-2012-6078 · GHSA-pmq6-p5mj-fpqq

Information disclosure in W3 Total Cache

Priority LOW 37

W3 Total Cache before 0.9.2.5 generates hash keys insecurely which allows remote attackers to predict the values of the hashes.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02318 Published 2019-11-22 No fix listed CWE-200
TI-2012-05041 CVE-2012-6077 · GHSA-624v-rq3v-wr69

Information disclosure in W3 Total Cache

Priority LOW 37

W3 Total Cache before 0.9.2.5 allows remote attackers to retrieve password hash information due to insecure storage of database cache files.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02134 Published 2019-11-22 No fix listed CWE-200
TI-2024-08780 CVE-2024-9461 · GHSA-qpv5-9fm8-4hfv

Total Upkeep <= 1.16.6 - Authenticated (Administrator+) Remote Code Execution via Backup Settings

Priority LOW 36

The Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.16.6 via the cron_interval parameter.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01041 Published 2024-11-26 No fix listed CWE-78
TI-2025-01982 CVE-2025-2257 · GHSA-x6vp-wm9x-hvcc

OS command injection in BoldGrid Total Upkeep – WordPress Backup Plugin plus Restore &…

Priority LOW 35

The Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.16.10 via the compression_level setting.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00864 Published 2025-03-26 No fix listed CWE-78
TI-2026-24929 CVE-2026-32401 · GHSA-r84h-59vq-9r9m

WordPress Client Invoicing by Sprout Invoices plugin <= 20.8.9 - Local File Inclusion vulnerability

Priority LOW 34

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in BoldGrid Client Invoicing by Sprout Invoices sprout-invoices allows PHP Local File Inclusion.This i…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00423 Published 2026-03-13 No fix listed CWE-98
TI-2023-04932 CVE-2023-5359 · GHSA-8w9v-r586-45j6

W3 Total Cache <= 2.7.5 - Sensitive Credentials Stored in Plaintext

Priority LOW 34

The W3 Total Cache plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 2.7.5 via Google OAuth API secrets stored in plaintext in the publicly visible plugin source.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00813 Published 2024-09-24 No fix listed CWE-200
Load more
Open these records in search →