Bold-themes vulnerabilities

Products

• Bold Page Builder 21
• Bello 3

Newest

• bold-themes bold page builder WordPress Bold Page Builder plugin <= 5.1.5 - Path Traversal vulnerability CVE-2024-54382 4.9 MediumDecember 16, 2024
• bold-themes bold page builder WordPress Bold Page Builder plugin <= 5.2.1 - Cross Site Scripting (XSS) vulnerability CVE-2024-53801 6.5 MediumDecember 6, 2024
• bold-themes bold page builder WordPress Bold Page Builder plugin <= 5.1.3 - Broken Access Control vulnerability CVE-2024-50417 4.3 MediumNovember 19, 2024
• bold-themes bold page builder WordPress Bold Page Builder plugin <= 5.1.1 - Cross Site Scripting (XSS) vulnerability CVE-2024-47298 6.5 MediumOctober 6, 2024
• bold-themes bold page builder WordPress Bold Page Builder plugin < 5.1.1 - Cross Site Scripting (XSS) vulnerability CVE-2024-47391 6.5 MediumOctober 5, 2024
• bold-themes bold page builder Bold Page Builder <= 5.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_button Shortcode CVE-2024-7100 6.4 MediumJuly 30, 2024
• bold-themes bold page builder Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via HTML Tags CVE-2024-2736 6.4 MediumApril 10, 2024
• bold-themes bold page builder Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via "Price List" Element CVE-2024-2735 6.4 MediumApril 10, 2024
• bold-themes bold page builder Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via AI Features CVE-2024-2734 6.4 MediumApril 10, 2024
• bold-themes bold page builder Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Separator Element CVE-2024-2733 5.4 MediumApril 10, 2024
• bold-themes bold page builder Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_price_list Shortcode CVE-2024-3267 6.4 MediumApril 9, 2024
• bold-themes bold page builder Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widget URL Attribute CVE-2024-3266 6.4 MediumApril 9, 2024
• bold-themes bold page builder WordPress Bold Page Builder plugin <= 4.8.0 - Cross Site Scripting (XSS) vulnerability CVE-2024-30442 6.5 MediumMarch 29, 2024
• bold-themes bold page builder WordPress Bold Page Builder plugin <= 4.7.6 - Cross Site Scripting (XSS) vulnerability CVE-2024-30179 6.5 MediumMarch 27, 2024
• bold-themes bold page builder Bold Page Builder <= 4.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Raw Content CVE-2024-1159 6.4 MediumFebruary 13, 2024
• bold-themes bold page builder Bold Page Builder <= 4.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Icon Link CVE-2024-1160 5.4 MediumFebruary 13, 2024
• bold-themes bold page builder Bold Page Builder <= 4.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button URL CVE-2024-1157 5.4 MediumFebruary 13, 2024
• bold-themes bold page builder WordPress Bold Page Builder Plugin <= 4.6.1 is vulnerable to Cross Site Scripting (XSS) CVE-2023-49823 6.5 MediumDecember 15, 2023
• bold-themes bold timeline lite Bold Timeline Lite < 1.1.5 - Contributor+ Stored XSS via Shortcode CVE-2022-4828 5.4 MediumJanuary 30, 2023
• bold-themes bold page builder Bold Page Builder < 4.3.3 - Admin+ Stored Cross-Site Scripting CVE-2022-2089 4.8 MediumJuly 11, 2022
• bold-themes cost calculator Cost Calculator <= 1.6 - Authenticated Local File Inclusion CVE-2021-24820 6.5 MediumFebruary 28, 2022
• bold-themes bold page builder Bold Page Builder < 3.1.6 - PHP Object Injection CVE-2021-24579 8.8 HighAugust 30, 2021
• bold-themes bello, boldthemes bello - directory & listing +1 more Bello < 1.6.0 - Unauthenticated Blind SQL Injection CVE-2021-24321 EPSS 66.6% 9.8 CriticalJune 1, 2021
• bold-themes bello, boldthemes bello - directory & listing +1 more Bello < 1.6.0 - Unauthenticated Reflected XSS & XFS CVE-2021-24320 EPSS 10.8% 6.1 MediumJune 1, 2021
• bold-themes bello, boldthemes bello - directory & listing +1 more Bello < 1.6.0 - Authenticated Cross-Site Scripting (XSS) and XFS CVE-2021-24319 5.4 MediumJune 1, 2021
• bold-themes bold page builder The bold-page-builder plugin before 2.3.2 for WordPress has no protection against modifying... CVE-2019-15821 EPSS 11.0% 7.5 HighAugust 30, 2019