CVE-2020-36848
Published Jul 12, 2025The Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and inclu…
Vendor archive
boldgrid CVEs
Beta · best-effort27 CVEs tagged to vendor boldgrid — 1 Critical, 9 High, 16 Medium, 1 Low, 0 Unrated.
CVE-2025-2257
Published Mar 26, 2025The Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.1…
CVE-2024-13907
Published Feb 27, 2025The Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and includin…
CVE-2025-0859
Published Feb 6, 2025The Post and Page Builder by BoldGrid – Visual Drag and Drop Editor plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.27.6 via the templ…
- evidence mentions
- 5
- Buzz score
- 34.4
CVE-2025-22759
Published Jan 15, 2025Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BoldGrid Post and Page Builder by BoldGrid post-and-page-builder allows Store…
CVE-2024-12365
Published Jan 14, 2025The W3 Total Cache plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the is_w3tc_admin_page function in all versions up to, an…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2024-12008
Published Jan 14, 2025The W3 Total Cache plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.8.1 through the publicly exposed debug log file. This makes i…
CVE-2024-12006
Published Jan 14, 2025The W3 Total Cache plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several functions in all versions up to, and includ…
CVE-2024-9461
Published Nov 26, 2024The Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.1…
CVE-2023-5359
Published Sep 25, 2024The W3 Total Cache plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 2.7.5 via Google OAuth API secrets stored in plaintext in…
CVE-2024-6848
Published Jul 20, 2024The Post and Page Builder by BoldGrid – Visual Drag and Drop Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via file uploads in all versions up to, and i…
CVE-2024-24869
Published May 17, 2024Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in BoldGrid Total Upkeep allows Relative Path Traversal.This issue affects Total Upkee…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2024-4400
Published May 16, 2024The Post and Page Builder by BoldGrid – Visual Drag and Drop Editor plguin for WordPress is vulnerable to Stored Cross-Site Scripting via an unknown parameter in versions up to, a…
CVE-2024-2950
Published Apr 6, 2024The BoldGrid Easy SEO – Simple and Effective SEO plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.6.14 via meta information (og:d…
CVE-2024-2888
Published Mar 26, 2024Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BoldGrid Post and Page Builder by BoldGrid – Visual Drag and Drop Editor allo…
CVE-2023-25480
Published Oct 6, 2023Cross-Site Request Forgery (CSRF) vulnerability in BoldGrid Post and Page Builder by BoldGrid – Visual Drag and Drop Editor plugin <= 1.24.1 versions.
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2022-4932
Published Mar 7, 2023The Total Upkeep plugin for WordPress is vulnerable to information disclosure in versions up to, and including 1.14.13. This is due to missing authorization on the heartbeat_recei…
CVE-2021-24452
Published Jul 19, 2021The W3 Total Cache WordPress plugin before 2.1.5 was affected by a reflected Cross-Site Scripting (XSS) issue within the "extension" parameter in the Extensions dashboard, when th…
CVE-2021-24436
Published Jul 19, 2021The W3 Total Cache WordPress plugin before 2.1.4 was vulnerable to a reflected Cross-Site Scripting (XSS) security vulnerability within the "extension" parameter in the Extensions…
CVE-2021-24427
Published Jul 12, 2021The W3 Total Cache WordPress plugin before 2.1.3 did not sanitise or escape some of its CDN settings, allowing high privilege users to use JavaScript in them, which will be output…
CVE-2013-2010
Published Feb 12, 2020WordPress W3 Total Cache Plugin 0.9.2.8 has a Remote PHP Code Execution Vulnerability
CVE-2012-6079
Published Nov 22, 2019W3 Total Cache before 0.9.2.5 exposes sensitive cached database information which allows remote attackers to download this information via their hash keys.
CVE-2012-6078
Published Nov 22, 2019W3 Total Cache before 0.9.2.5 generates hash keys insecurely which allows remote attackers to predict the values of the hashes.
CVE-2012-6077
Published Nov 22, 2019W3 Total Cache before 0.9.2.5 allows remote attackers to retrieve password hash information due to insecure storage of database cache files.
CVE-2019-6715
Published Apr 1, 2019pub/sns.php in the W3 Total Cache plugin before 0.9.4 for WordPress allows remote attackers to read arbitrary files via the SubscribeURL field in SubscriptionConfirmation JSON dat…
- evidence mentions
- 1
- Buzz score
- 11.9
Showing 1-25 of 27 CVEsPage 1 of 2