Read the docs

BoldGrid

Records68All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high27CVSS 7.0–8.9

Exploited now

BoldGrid records in CISA KEV

No BoldGrid vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
W3 Total Cache 14 records HIGH Total Upkeep 6 records MEDIUM Post And Page Builder 5 records LOW Easy Seo 1 record LOW Post And Page Builder By Boldgrid - Visual Drag And Drop Editor 1 record LOW

Records

6 records in Total Upkeep · all components

TI-2020-18983 CVE-2020-36848 · GHSA-qcmh-3f59-hmv7

Total Upkeep by BoldGrid <= 1.14.9 - Unauthenticated Backup Download

Priority MEDIUM 43

The Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.14.9 via the env-info.php and res…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01877 Published 2025-07-12 No fix listed CWE-200
TI-2024-16383 CVE-2024-24869 · GHSA-82rx-89fp-4w49

WordPress Total Upkeep plugin <= 1.15.8 - Arbitrary File Download vulnerability

Priority MEDIUM 40

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in BoldGrid Total Upkeep allows Relative Path Traversal.This issue affects Total Upkeep: from n/a through 1.15.8.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00658 Published 2024-05-17 No fix listed CWE-22
TI-2024-08780 CVE-2024-9461 · GHSA-qpv5-9fm8-4hfv

Total Upkeep <= 1.16.6 - Authenticated (Administrator+) Remote Code Execution via Backup Settings

Priority LOW 36

The Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.16.6 via the cron_interval parameter.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01041 Published 2024-11-26 No fix listed CWE-78
TI-2025-01982 CVE-2025-2257 · GHSA-x6vp-wm9x-hvcc

OS command injection in BoldGrid Total Upkeep – WordPress Backup Plugin plus Restore &…

Priority LOW 35

The Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.16.10 via the compression_level setting.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00864 Published 2025-03-26 No fix listed CWE-78
TI-2024-12927 CVE-2024-13907 · GHSA-5jg7-jg3h-568w

Server-side request forgery in BoldGrid Total Upkeep – WordPress Backup Plugin plus…

Priority LOW 29

The Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.16.8 via the 'download' function.

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.00469 Published 2025-02-27 No fix listed CWE-918
Open these records in search →