BoldGrid 厂商相关 52 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。
BoldGrid 是一家专注于 WordPress 生态的开发商，提供网站构建工具及主题插件服务。其软件历史上频繁出现远程代码执行、跨站脚本及越权访问等高危漏洞，累计已收录 43 条 CVE。这些缺陷多源于输入验证不足或权限逻辑缺陷，易导致数据泄露或服务器被控。鉴于其广泛的用户基数，相关漏洞修复需及时跟进，以保障网站基础设施的安全稳定运行。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2025-0859 | WordPress plugin Post and Page Builder by BoldGrid 路径遍历漏洞 — Post and Page Builder by BoldGrid – Visual Drag and Drop Editor CWE-22 | 6.5 | Medium | 2025-02-06 |
| CVE-2025-24606 | WordPress plugin Client Invoicing by Sprout Invoices 安全漏洞 — Client Invoicing by Sprout Invoices CWE-862 | 6.4 | Medium | 2025-01-27 |
| CVE-2025-22759 | WordPress plugin Post and Page Builder by BoldGrid – Visual Drag and Drop Editor 跨站脚本漏洞 — Post and Page Builder by BoldGrid CWE-79 | 6.5 | Medium | 2025-01-15 |
| CVE-2024-12008 | WordPress plugin W3 Total Cache 信息泄露漏洞 — W3 Total Cache CWE-200 | 5.3 | Medium | 2025-01-14 |
| CVE-2024-12006 | WordPress plugin W3 Total Cache 安全漏洞 — W3 Total Cache CWE-862 | 5.3 | Medium | 2025-01-14 |
| CVE-2024-12365 | WordPress plugin W3 Total Cache 安全漏洞 — W3 Total Cache CWE-862 | 8.5 | High | 2025-01-14 |
| CVE-2025-22512 | WordPress plugin Help Scout 安全漏洞 — Help Scout CWE-862 | 4.3 | Medium | 2025-01-07 |
| CVE-2024-53819 | WordPress plugin Client Invoicing by Sprout Invoices 安全漏洞 — Client Invoicing by Sprout Invoices CWE-862 | 5.3 | Medium | 2024-12-09 |
| CVE-2024-9461 | WordPress plugin Total Upkeep 安全漏洞 — Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid CWE-78 | 7.2 | High | 2024-11-26 |
| CVE-2023-5359 | WordPress plugin W3 Total Cache 信息泄露漏洞 — W3 Total Cache CWE-200 | 3.7 | Low | 2024-09-24 |
| CVE-2024-6848 | WordPress plugin Post and Page Builder 安全漏洞 — Post and Page Builder by BoldGrid – Visual Drag and Drop Editor CWE-79 | 6.4 | Medium | 2024-07-20 |
| CVE-2024-24869 | WordPress plugin Total Upkeep 路径遍历漏洞 — Total Upkeep CWE-22 | 7.5 | High | 2024-05-17 |
| CVE-2024-4400 | WordPress plugin Post and Page Builder by BoldGrid 安全漏洞 — Post and Page Builder by BoldGrid – Visual Drag and Drop Editor CWE-79 | 6.4 | Medium | 2024-05-16 |
| CVE-2024-2950 | WordPress Plugin BoldGrid Easy SEO 安全漏洞 — BoldGrid Easy SEO – Simple and Effective SEO CWE-200 | 5.3 | Medium | 2024-04-06 |
| CVE-2024-1692 | WordPress Plugin BoldGrid Easy SEO 安全漏洞 — BoldGrid Easy SEO – Simple and Effective SEO CWE-79 | 6.4 | Medium | 2024-03-30 |
| CVE-2024-2888 | WordPress Plugin Post and Page Builder by BoldGrid 跨站脚本漏洞 — Post and Page Builder by BoldGrid – Visual Drag and Drop Editor CWE-79 | 6.5 | Medium | 2024-03-26 |
| CVE-2024-0386 | WordPress Plugin weForms 安全漏洞 — weForms – Easy Drag & Drop Contact Form Builder For WordPress CWE-79 | 7.2 | High | 2024-03-12 |
| CVE-2023-25480 | WordPress Plugin Post and Page Builder by BoldGrid – Visual Drag and Drop Editor 跨站请求伪造漏洞 — Post and Page Builder by BoldGrid – Visual Drag and Drop Editor CWE-352 | 4.3 | Medium | 2023-10-06 |
| CVE-2022-4932 | WordPress plugin Total Upkeep 安全漏洞 — Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid CWE-862 | 4.3 | Medium | 2023-03-07 |
| CVE-2021-24452 | WordPress 跨站脚本漏洞 — W3 Total Cache CWE-79 | 6.1 | - | 2021-07-19 |
| CVE-2021-24436 | WordPress和W3 Total Cache 跨站脚本漏洞 — W3 Total Cache CWE-79 | 6.1 | - | 2021-07-19 |
| CVE-2021-24427 | WordPress 跨站脚本漏洞 — W3 Total Cache CWE-79 | 4.8 | - | 2021-07-12 |
本页汇总了 BoldGrid 厂商截至目前公开的全部 52 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。