BoldGrid Post and Page Builder Path Traversal Vulnerability

A path traversal vulnerability exists in the Post and Page Builder by BoldGrid – Visual Drag and Drop Editor, affecting versions through 1.27.8. This vulnerability allows attackers to manipulate file paths, potentially accessing restricted files on the server.

Impact

Exploitation of this vulnerability could lead to unauthorized file access on the server, allowing attackers to read sensitive information or potentially execute malicious scripts.

Remediation

Users of the BoldGrid Post and Page Builder should update to version 1.27.9 or later. Patchstack users can enable auto-updates for vulnerable plugins.