Plugin icon

Post and Page Builder by BoldGrid – Visual Drag and Drop Editor

post-and-page-builder

Vulnerabilities:

12

Last Updated:

September 25, 2026

Active Installs:

50000

Published
Title
Fixed in
CVSS
Published
2026-10-14
Title
Post and Page Builder by BoldGrid < 1.27.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-label' Attribute
Fixed in
Fixed in 1.27.14
CVSS
5.5 (medium)
Published
2026-09-30
Title
Post and Page Builder by BoldGrid – Visual Drag and Drop Editor < 1.27.15 - Unauthenticated Stored Cross-Site Scripting
Fixed in
Fixed in 1.27.15
CVSS
7.2 (high)
Published
2026-01-05
Title
Post and Page Builder by BoldGrid < 1.27.10 - Missing Authorization
Fixed in
Fixed in 1.27.10
CVSS
4.3 (medium)
Published
2025-07-22
Title
Post and Page Builder by BoldGrid – Visual Drag and Drop Editor < 1.27.9 - Authenticated (Contributor+) Path Traversal
Fixed in
Fixed in 1.27.9
CVSS
4.3 (medium)
Published
2025-06-19
Title
Post and Page Builder by BoldGrid – Visual Drag and Drop Editor < 1.27.9 - Authenticated (Contributor+) Server-Side Request Forgery
Fixed in
Fixed in 1.27.9
CVSS
6.4 (medium)
Published
2025-06-19
Title
Post and Page Builder by BoldGrid – Visual Drag and Drop Editor < 1.27.9 - Cross-Site Request Forgery
Fixed in
Fixed in 1.27.9
CVSS
4.3 (medium)
Published
2025-02-05
Title
Post and Page Builder by BoldGrid < 1.27.7 - Path Traversal to Authenticated (Contributor+) Arbitrary File Read via template_via_url Function
Fixed in
Fixed in 1.27.7
CVSS
6.5 (medium)
Published
2025-01-14
Title
Post and Page Builder by BoldGrid < 1.27.6 - Contributor+ Stored XSS
Fixed in
Fixed in 1.27.6
CVSS
5.9 (medium)
Published
2024-07-19
Title
Post and Page Builder by BoldGrid – Visual Drag and Drop Editor < 1.26.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via File Upload
Fixed in
Fixed in 1.26.7
CVSS
6.4 (medium)
Published
2024-05-15
Title
Post and Page Builder by BoldGrid – Visual Drag and Drop Editor < 1.26.5 - Authenticated (Contributer+) Stored Cross-Site Scripting
Fixed in
Fixed in 1.26.5
CVSS
6.4 (medium)
Published
2024-03-25
Title
Post and Page Builder by BoldGrid – Visual Drag and Drop Editor Plugin < 1.26.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 1.26.3
CVSS
6.4 (medium)
Published
2023-08-22
Title
Post and Page Builder by BoldGrid < 1.24.2 - Editor Settings Update via CSRF
Fixed in
Fixed in 1.24.2
CVSS
4.3 (medium)