File and Path Handling

Every one of the 8 is a mark on the map. Named now: 1 to 8, most at risk first.

1. W3 Total Cache <= 2.9.4 - Unauthenticated Arbitrary File ReadCVE-2026-9282boldgrid · CVSS 7.5 · 2.9% likely

   CWE-22

2. Post and Page Builder by BoldGrid <= 1.27.6 - Path Traversal to Authenticated (Contributor+) Arbitrary File Read via template_via_url FunctionCVE-2025-0859boldgrid · CVSS 6.5 · 0.7% likely

   CWE-22

3. WordPress Total Upkeep plugin <= 1.15.8 - Arbitrary File Download vulnerabilityCVE-2024-24869BoldGrid · CVSS 7.5 · 0.7% likely

   CWE-22

4. WordPress weForms plugin <= 1.6.28 - Arbitrary File Deletion vulnerabilityCVE-2026-111833Bold Grid · CVSS 7.5 · 0.5% likely

   CWE-22

5. WordPress Client Invoicing by Sprout Invoices plugin <= 20.8.9 - Local File Inclusion vulnerabilityCVE-2026-32401BoldGrid · CVSS 7.2 · 0.5% likely

   CWE-98

6. WordPress W3 Total Cache plugin <= 2.10.2 - Path Traversal vulnerabilityCVE-2026-66695BoldGrid · CVSS 6.5 · 0.4% likely

   CWE-35

7. weForms <= 1.6.28 - Unauthenticated Limited Media File Deletion via 'wpuf_files' ParameterCVE-2026-110253boldgrid · CVSS 5.4 · 0.3% likely

   CWE-22

8. WordPress Post and Page Builder by BoldGrid – Visual Drag and Drop Editor <= 1.27.8 - Path Traversal VulnerabilityCVE-2025-52712BoldGrid · CVSS 4.2 · 0.2% likely

   CWE-35

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.