Read the docs

BoldGrid

Records68All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high27CVSS 7.0–8.9

Exploited now

BoldGrid records in CISA KEV

No BoldGrid vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
W3 Total Cache 14 records HIGH Total Upkeep 6 records MEDIUM Post And Page Builder 5 records LOW Easy Seo 1 record LOW Post And Page Builder By Boldgrid - Visual Drag And Drop Editor 1 record LOW

Records

14 records in W3 Total Cache · all components

TI-2024-11141 CVE-2024-12008 · GHSA-crhx-c2pr-jp56

W3 Total Cache <= 2.8.1 Information Exposure via Log Files

Priority MEDIUM 43

The W3 Total Cache plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.8.1 through the publicly exposed debug log file.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02371 Published 2025-01-14 No fix listed CWE-200
TI-2012-05043 CVE-2012-6079 · GHSA-cxp7-rf23-r7xf

Information disclosure in W3 Total Cache

Priority LOW 37

W3 Total Cache before 0.9.2.5 exposes sensitive cached database information which allows remote attackers to download this information via their hash keys.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02134 Published 2019-11-22 No fix listed CWE-200
TI-2012-05042 CVE-2012-6078 · GHSA-pmq6-p5mj-fpqq

Information disclosure in W3 Total Cache

Priority LOW 37

W3 Total Cache before 0.9.2.5 generates hash keys insecurely which allows remote attackers to predict the values of the hashes.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02318 Published 2019-11-22 No fix listed CWE-200
TI-2012-05041 CVE-2012-6077 · GHSA-624v-rq3v-wr69

Information disclosure in W3 Total Cache

Priority LOW 37

W3 Total Cache before 0.9.2.5 allows remote attackers to retrieve password hash information due to insecure storage of database cache files.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02134 Published 2019-11-22 No fix listed CWE-200
TI-2023-04932 CVE-2023-5359 · GHSA-8w9v-r586-45j6

W3 Total Cache <= 2.7.5 - Sensitive Credentials Stored in Plaintext

Priority LOW 34

The W3 Total Cache plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 2.7.5 via Google OAuth API secrets stored in plaintext in the publicly visible plugin source.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00813 Published 2024-09-24 No fix listed CWE-200
TI-2024-11139 CVE-2024-12006 · GHSA-qjr6-x22w-558c

Missing authorization in BoldGrid W3 Total Cache

Priority LOW 31

The W3 Total Cache plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several functions in all versions up to, and including, 2.8.1.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00519 Published 2025-01-14 No fix listed CWE-862
TI-2021-06741 CVE-2021-24452 · GHSA-w3f9-qvj2-72hf

W3 Total Cache < 2.1.5 - Reflected XSS in Extensions Page (JS Context)

Priority LOW 31

The W3 Total Cache WordPress plugin before 2.1.5 was affected by a reflected Cross-Site Scripting (XSS) issue within the "extension" parameter in the Extensions dashboard, when the 'Anonymously track usage to improve pro…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01917 Published 2021-07-19 Fixed in 2.1.5 CWE-79
TI-2021-06726 CVE-2021-24436 · GHSA-8qcc-x8gh-5483

W3 Total Cache < 2.1.4 - Reflected XSS in Extensions Page (Attribute Context)

Priority LOW 31

The W3 Total Cache WordPress plugin before 2.1.4 was vulnerable to a reflected Cross-Site Scripting (XSS) security vulnerability within the "extension" parameter in the Extensions dashboard, which is output in an attribu…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0183 Published 2021-07-19 Fixed in 2.1.4 CWE-79
TI-2014-07157 CVE-2014-8724 · GHSA-367x-pccg-fc8h

Cross-site scripting (XSS) vulnerability in the W3 Total Cache plugin before 0.9.4.1 for…

Priority LOW 24

Cross-site scripting (XSS) vulnerability in the W3 Total Cache plugin before 0.9.4.1 for WordPress, when debug mode is enabled, allows remote attackers to inject arbitrary web script or HTML via the "Cache key" in the HT…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02055 Published 2014-12-19 No fix listed CWE-79
TI-2021-06717 CVE-2021-24427 · GHSA-6h4x-c495-6qh7

W3 Total Cache < 2.1.3 - Authenticated Stored XSS

Priority LOW 23

The W3 Total Cache WordPress plugin before 2.1.3 did not sanitise or escape some of its CDN settings, allowing high privilege users to use JavaScript in them, which will be output in the page, leading to an authenticated…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00622 Published 2021-07-12 Fixed in 2.1.3 CWE-79
Open these records in search →