Post and Page Builder by BoldGrid – Visual Drag and Drop Editor — Vulnerabilities & Security Advisories 6

All 6 CVE vulnerabilities found in Post and Page Builder by BoldGrid – Visual Drag and Drop Editor, with AI-generated Chinese analysis, references, and POCs.

Vendor: BoldGrid

CVE ID	Title	CVSS	Severity	Published
CVE-2026-78001	Post and Page Builder by BoldGrid <= 1.27.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-label' Attribute CWE-79	6.4	Medium	2026-10-15
CVE-2025-0859	Post and Page Builder by BoldGrid <= 1.27.6 - Path Traversal to Authenticated (Contributor+) Arbitrary File Read via template_via_url Function CWE-22	6.5	Medium	2025-02-06
CVE-2024-6848	Post and Page Builder by BoldGrid – Visual Drag and Drop Editor <= 1.26.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via File Upload CWE-79	6.4	Medium	2024-07-20
CVE-2024-4400	Post and Page Builder by BoldGrid – Visual Drag and Drop Editor <= 1.26.4 - Authenticated (Contributer+) Stored Cross-Site Scripting CWE-79	6.4	Medium	2024-05-16
CVE-2024-2888	WordPress Post and Page Builder by BoldGrid plugin <= 1.26.2 - Cross Site Scripting (XSS) vulnerability CWE-79	6.5	Medium	2024-03-26
CVE-2023-25480	WordPress Post and Page Builder by BoldGrid – Visual Drag and Drop Editor Plugin <= 1.24.1 is vulnerable to Cross Site Request Forgery (CSRF) CWE-352	4.3	Medium	2023-10-06

All 6 known CVE vulnerabilities affecting Post and Page Builder by BoldGrid – Visual Drag and Drop Editor with full Chinese analysis, references, and POCs where available.