CVE-2023-25480: WordPress Post and Page Builder by BoldGrid – Visual Drag and Drop Editor Plugin <= 1.24.1 is vulnerable to Cross Site Request Forgery (CSRF)

Q: What is CVE-2023-25480?

CVE-2023-25480 is a Cross-Site Request Forgery (CSRF) vulnerability in the BoldGrid Post and Page Builder by BoldGrid – Visual Drag and Drop Editor plugin version 1.24.1 and below.

Q: How severe is CVE-2023-25480?

CVE-2023-25480 has a severity score of 8.8, which is considered high.

Q: How does CVE-2023-25480 affect the BoldGrid Post and Page Builder plugin?

CVE-2023-25480 affects the BoldGrid Post and Page Builder plugin version 1.24.1 and below, allowing potential Cross-Site Request Forgery attacks.

Q: Is there a fix available for CVE-2023-25480?

Yes, a fix for CVE-2023-25480 is available. It is recommended to update to a version higher than 1.24.1 of the BoldGrid Post and Page Builder plugin.

Q: Is CVE-2023-25480 related to any Common Weakness Enumeration (CWE)?

Yes, CVE-2023-25480 is related to CWE-352, which is Cross-Site Request Forgery (CSRF).

Published Oct 6, 2023

Updated

Cross-Site Request Forgery (CSRF) vulnerability in BoldGrid Post and Page Builder by BoldGrid – Visual Drag and Drop Editor plugin <= 1.24.1 versions.

Affected Software

2 affected components

BoldGrid Post And Page Builder By Boldgrid - Visual Drag And Drop Editor Wordpress<=1.24.1

BoldGrid Post And Page Builder Wordpress<=1.24.1

Remediation

Information

Update to 1.24.2 or a higher version.

Event History

Oct 6, 2023

CVE Published

via MITRE·12:41 PM

Data Sourced

via MITRE·12:41 PM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

What is CVE-2023-25480?

CVE-2023-25480 is a Cross-Site Request Forgery (CSRF) vulnerability in the BoldGrid Post and Page Builder by BoldGrid – Visual Drag and Drop Editor plugin version 1.24.1 and below.

How severe is CVE-2023-25480?

CVE-2023-25480 has a severity score of 8.8, which is considered high.

How does CVE-2023-25480 affect the BoldGrid Post and Page Builder plugin?