Vendor

    BoldGrid

    64 known vulnerabilities in products by BoldGrid, 0 of them actively exploited (CISA KEV).

    Key figures

    64

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    4

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in BoldGrid
    CriticalCVE-2013-2010

    W3 Total Cache Plugin: Code Execution

    also in 1 other product

    		9.8
    HighCVE-2026-9282

    W3 Total Cache <= 2.9.4 - Unauthenticated Arbitrary File Read via 'f_array[]' Parameter

    		7.5
    HighCVE-2026-5032

    W3 Total Cache <= 2.9.3 - Unauthenticated Security Token Exposure via User-Agent Header

    		7.5
    HighCVE-2019-6715

    W3 Total Cache: security vulnerability

    		7.5
    HighCVE-2024-12365

    BoldGrid W3 Total Cache: Missing Authorization

    		8.5
    HighCVE-2020-36848

    Total Upkeep by BoldGrid <= 1.14.9 - Unauthenticated Backup Download

    		7.5
    HighCVE-2012-6078

    W3 Total Cache: security vulnerability

    also in 1 other product

    		7.5
    HighCVE-2012-6079

    W3 Total Cache: security vulnerability

    also in 1 other product

    		7.5
    HighCVE-2012-6077

    W3 Total Cache: security vulnerability

    also in 1 other product

    		7.5
    HighCVE-2024-12008

    W3 Total Cache <= 2.8.1 Information Exposure via Log Files

    		5.3
    MediumCVE-2021-24452

    W3 Total Cache < 2.1.5 - Reflected XSS in Extensions Page (JS Context)

    		6.1
    MediumCVE-2021-24436

    W3 Total Cache < 2.1.4 - Reflected XSS in Extensions Page (Attribute Context)

    		6.1
    CriticalCVE-2026-57623

    WordPress W3 Total Cache plugin <= 2.9.4 - Arbitrary Code Execution vulnerability

    		9.0
    HighCVE-2026-78438

    BoldGrid W3 Total Cache: Cross-site Scripting

    		7.2
    HighCVE-2024-9461

    Total Upkeep <= 1.16.6 - Authenticated (Administrator+) Remote Code Execution via Backup Settings

    		7.2
    HighCVE-2025-2257

    BoldGrid Total Upkeep: OS Command Injection

    		7.2
    HighCVE-2026-66708

    WordPress Total Upkeep plugin <= 1.17.2 - Broken Access Control vulnerability

    		8.2
    HighCVE-2026-18109

    W3 Total Cache <= 2.10.3 - Unauthenticated Stored Cross-Site Scripting via Comment Author Name

    		7.2
    CriticalCVE-2025-64227

    WordPress Client Invoicing by Sprout Invoices plugin <= 20.8.7 - PHP Object Injection vulnerability

    		9.8
    HighCVE-2026-87920

    W3 Total Cache <= 2.10.6 - Unauthenticated Stored Cross-Site Scripting via Comment Content

    		7.2
    HighCVE-2026-100510

    BoldGrid Post and Page Builder by BoldGrid: Cross-site Scripting

    		7.1
    CriticalCVE-2026-27384

    WordPress W3 Total Cache plugin <= 2.9.1 - Arbitrary Code Execution vulnerability

    		9.0
    MediumCVE-2026-66695

    WordPress W3 Total Cache plugin <= 2.10.2 - Path Traversal vulnerability

    		6.5
    HighCVE-2024-24869

    WordPress Total Upkeep plugin <= 1.15.8 - Arbitrary File Download vulnerability

    		7.5
    HighCVE-2026-32484

    WordPress weForms plugin <= 1.6.26 - PHP Object Injection vulnerability

    		8.8

    All vulnerabilities in search

    Products

    Products by BoldGrid
    W3 Total Cache300
    Client Invoicing By Sprout Invoices90
    Total Upkeep80
    Post And Page Builder By Boldgrid – Visual Drag And Drop Editor70
    Post And Page Builder By Boldgrid60
    Total Upkeep – Wordpress Backup Plugin Plus Restore & Migrate By Boldgrid60
    Post and Page Builder by BoldGrid50
    Sprout Clients40
    Weforms – Easy Drag & Drop Contact Form Builder For Wordpress30