BOLD Workplanner vulnerabilities

1 known vulnerability in BOLD Workplanner from GLOBAL PLANNING SOLUTIONS S.L (GPS). 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  BOLD Workplanner: Authorization Bypass Through User-Controlled Key

  CVE-2025-41098Sep 30, 2025GLOBAL PLANNING SOLUTIONS S.L (GPS)

  Insecure Direct Object Reference (IDOR) vulnerability in BOLD Workplanner in versions prior to 2.5.25 (4935b438f9b), consisting of a misuse of the general enquiry web service.