B
Vendor security profile
BoldGrid
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs7
Critical0
CISA KEV0
Public exploit0
Patch rate%0
Avg. CVSS6.8
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
3
2
2
CVE KEV
CVE severity distribution
7toplam CVE
High4 (57%)
Medium3 (43%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%0
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
7Unknown
Latest vulnerabilities
6.4
CVE-2026-78001
Post and Page Builder by BoldGrid <= 1.27.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-label' Attribute
B
Patch status unknown
7.2
CVE-2026-87920
W3 Total Cache <= 2.10.6 - Unauthenticated Stored Cross-Site Scripting via Comment Content
B
Patch status unknownEPSS %0
7.1
CVE-2026-100510
WordPress Post and Page Builder by BoldGrid plugin <= 1.27.14 - Cross Site Scripting (XSS) vulnerability
B
Patch status unknownEPSS %0
5.3
CVE-2026-97078
WordPress Client Invoicing by Sprout Invoices plugin <= 20.8.17 - Insecure Direct Object References (IDOR) vulnerability
B
Patch status unknownEPSS %0
7.2
CVE-2026-18109
W3 Total Cache <= 2.10.3 - Unauthenticated Stored Cross-Site Scripting via Comment Author Name
B
Patch status unknownEPSS %0
8.2
CVE-2026-66708
WordPress Total Upkeep plugin <= 1.17.2 - Broken Access Control vulnerability
B
Patch status unknownEPSS %0
6.5
CVE-2026-66695
WordPress W3 Total Cache plugin <= 2.10.2 - Path Traversal vulnerability
B
Patch status unknownEPSS %0