CVE-2023-25480

CVE Database · CVE-2023-25480

CVE-2023-25480

· MEDIUMModified

CVSS v3.1

4.3

EPSS

0.21%

Published

Oct 6, 2023

Modified

Mar 19, 2025

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Cross-Site Request Forgery (CSRF) vulnerability in BoldGrid Post and Page Builder by BoldGrid – Visual Drag and Drop Editor plugin <= 1.24.1 versions.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Weaknesses (CWE)

CWE-352

Affected Products (1)

boldgrid · post_and_page_buildervulnerable

References (2)

https://patchstack.com/database/vulnerability/post-and-page-builder/wordpress-post-and-page-builder-by-boldgrid-plugin-1-24-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve

Third Party Advisory

https://patchstack.com/database/vulnerability/post-and-page-builder/wordpress-post-and-page-builder-by-boldgrid-plugin-1-24-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve

Third Party Advisory

KEV Catalog EPSS Scores Vendors All CVEs