BoldGrid Post and Page Builder by BoldGrid – Visual Drag and Drop Editor

• CVE-2026-78001 Medium 6.4 Post and Page Builder by BoldGrid <= 1.27.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-label' Attribute 0.2%
• CVE-2025-0859 Medium 6.5 Post and Page Builder by BoldGrid <= 1.27.6 - Path Traversal to Authenticated (Contributor+) Arbitrary File Read via template_via_url Function 0.7%
• CVE-2024-6848 Medium 6.4 Post and Page Builder by BoldGrid – Visual Drag and Drop Editor <= 1.26.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via File Upload 0.5%
• CVE-2024-4400 Medium 6.4 Post and Page Builder by BoldGrid – Visual Drag and Drop Editor <= 1.26.4 - Authenticated (Contributer+) Stored Cross-Site Scripting 0.3%
• CVE-2024-2888 Medium 6.5 WordPress Post and Page Builder by BoldGrid plugin <= 1.26.2 - Cross Site Scripting (XSS) vulnerability 0.3%
• CVE-2023-25480 Medium 4.3 WordPress Post and Page Builder by BoldGrid – Visual Drag and Drop Editor Plugin <= 1.24.1 is vulnerable to Cross Site Request Forgery (CSRF) 0.3%