Boldthemes vulnerabilities

Products

• Bold Page Builder 46
• Bold Timeline Lite 6
• Bello - Directory & Listing 3

Newest

• boldthemes avala WordPress Avala theme <= 1.1.4 - PHP Object Injection vulnerability CVE-2026-62077 9.8 CriticalOctober 10, 2026
• boldthemes bold page builder Bold Page Builder <= 5.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'background_image' Parameter CVE-2026-6173 6.4 MediumSeptember 30, 2026
• boldthemes bold page builder Bold Page Builder <= 5.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'target' Shortcode Attribute CVE-2026-6171 6.4 MediumSeptember 30, 2026
• boldthemes bold page builder Bold Page Builder <= 5.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_css_image_grid 'images' Shortcode Attribute CVE-2026-6170 6.4 MediumSeptember 30, 2026
• boldthemes bold page builder Bold Page Builder <= 5.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_service title CVE-2026-88037 6.4 MediumSeptember 30, 2026
• boldthemes bold page builder Bold Page Builder <= 5.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'caption' Parameter CVE-2026-6172 6.4 MediumSeptember 30, 2026
• boldthemes bold page builder Bold Page Builder <= 5.9.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'shortcode_content' Parameter CVE-2026-5920 6.4 MediumSeptember 16, 2026
• boldthemes bold page builder WordPress Bold Page Builder plugin <= 5.9.9 - Cross Site Scripting (XSS) vulnerability CVE-2026-62110 6.5 MediumSeptember 11, 2026
• boldthemes bold timeline lite Bold Timeline Lite <= 1.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes CVE-2026-7438 6.4 MediumSeptember 11, 2026
• boldthemes bold page builder Bold Page Builder < 5.9.9 - Contributor+ Stored XSS via Slider Elements' additional_settings CVE-2026-84028 6.8 MediumSeptember 6, 2026
• boldthemes bold page builder Bold Page Builder < 5.9.8 - Contributor+ Stored XSS via Multiple Shortcode Element Attributes CVE-2026-84022 6.8 MediumSeptember 5, 2026
• boldthemes bold page builder Bold Page Builder < 5.9.8 - Contributor+ Stored XSS via bt_bb_button/bt_bb_headline/bt_bb_icon URL CVE-2026-84021 6.8 MediumSeptember 5, 2026
• boldthemes bold page builder Bold Page Builder <= 5.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2026-2357 6.4 MediumAugust 16, 2026
• boldthemes nifty WordPress Nifty theme <= 1.4.1 - PHP Object Injection vulnerability CVE-2026-27429 9.8 CriticalJune 16, 2026
• boldthemes bold page builder Bold Page Builder <= 5.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_button Shortcode CVE-2026-3694 6.4 MediumMay 14, 2026
• boldthemes celeste WordPress Celeste theme <= 1.3.6 - PHP Object Injection vulnerability CVE-2026-27369 8.1 HighMarch 5, 2026
• boldthemes ippsum WordPress Ippsum theme <= 1.2.0 - PHP Object Injection vulnerability CVE-2025-68541 9.8 CriticalFebruary 20, 2026
• boldthemes travelicious WordPress Travelicious theme < 1.6.7 - PHP Object Injection vulnerability CVE-2025-67997 9.8 CriticalFebruary 20, 2026
• boldthemes nestin WordPress Nestin theme < 1.2.6 - PHP Object Injection vulnerability CVE-2025-67996 9.8 CriticalFebruary 20, 2026
• boldthemes bold page builder WordPress Bold Page Builder plugin <= 5.6.9 - Cross Site Scripting (XSS) vulnerability CVE-2026-25451 6.5 MediumFebruary 19, 2026
• boldthemes bold page builder Bold Page Builder <= 5.5.3 - Authenticated (Author+) Stored DOM-based Cross-Site Scripting in Post Grid CVE-2025-13463 6.4 MediumFebruary 7, 2026
• boldthemes bold page builder Bold Page Builder <= 5.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2025-12159 6.4 MediumFebruary 7, 2026
• boldthemes bold page builder Bold Builder <= 5.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_tabs Shortcode CVE-2025-12803 6.4 MediumFebruary 7, 2026
• boldthemes bold page builder Bold Page Builder <= 5.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_accordion_item Shortcode CVE-2025-15267 6.4 MediumFebruary 7, 2026
• boldthemes bold timeline lite WordPress Bold Timeline Lite plugin <= 1.2.7 - Cross Site Scripting (XSS) vulnerability CVE-2025-68513 6.5 MediumDecember 24, 2025
• boldthemes codiqa WordPress Codiqa theme < 1.2.8 - PHP Object Injection vulnerability CVE-2025-64233 9.8 CriticalDecember 18, 2025
• boldthemes denticare WordPress DentiCare Theme < 1.4.3 - PHP Object Injection Vulnerability CVE-2025-54723 9.8 CriticalDecember 18, 2025
• boldthemes bold timeline lite Bold Timeline Lite <= 1.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'title' Parameter in 'bold_timeline_group' Shortcode CVE-2025-14032 6.4 MediumDecember 12, 2025
• boldthemes bold page builder WordPress Bold Page Builder plugin <= 5.5.2 - Cross Site Scripting (XSS) vulnerability CVE-2025-66057 6.5 MediumNovember 21, 2025
• boldthemes bold page builder Bold Page Builder <= 5.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via `percentage` Parameter CVE-2025-7730 6.4 MediumOctober 23, 2025
• boldthemes addison WordPress Addison theme < 1.4.8 - PHP Object Injection vulnerability CVE-2025-60216 9.8 CriticalOctober 22, 2025
• boldthemes goldenblatt WordPress Goldenblatt theme < 1.3.0 - PHP Object Injection vulnerability CVE-2025-60214 9.8 CriticalOctober 22, 2025
• boldthemes bold page builder WordPress Bold Page Builder Plugin <= 5.4.3 - Cross Site Scripting (XSS) Vulnerability CVE-2025-58194 6.5 MediumAugust 27, 2025
• boldthemes bold page builder WordPress Bold Page Builder plugin <= 5.4.1 - Cross Site Scripting (XSS) Vulnerability CVE-2025-54006 6.5 MediumJuly 16, 2025
• badhonrocks divi torque lite, blossomthemes social feed, boldthemes bold page builder +12 more +14 more Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Magnific Popups JavaScript Library CVE-2024-5647 6.4 MediumJuly 3, 2025
• boldthemes amwerk WordPress Amwerk theme <= 1.2.0 - PHP Object Injection Vulnerability CVE-2025-52724 9.8 CriticalJune 27, 2025
• boldthemes bold page builder Bold Builder <= 5.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via additional_settings Parameter CVE-2025-5286 6.4 MediumMay 29, 2025
• boldthemes medicare WordPress Medicare Theme <= 2.1.0 - PHP Object Injection vulnerability CVE-2025-39499 9.8 CriticalMay 23, 2025
• boldthemes avantage WordPress Avantage Theme <= 2.4.9 - PHP Object Injection vulnerability CVE-2025-39495 9.8 CriticalMay 23, 2025
• boldthemes bold page builder Bold Page Builder <= 5.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-text' Parameter CVE-2025-3715 6.4 MediumMay 18, 2025
• boldthemes bold page builder WordPress Bold Page Builder plugin <= 5.3.0 - Cross Site Scripting (XSS) Vulnerability CVE-2025-47525 5.9 MediumMay 7, 2025
• boldthemes bold page builder WordPress Bold Page Builder plugin <= 5.3.2 - Cross Site Scripting (XSS) Vulnerability CVE-2025-47488 6.5 MediumMay 7, 2025
• boldthemes bold timeline lite WordPress Bold Timeline Lite plugin <= 1.1.9 - Broken Access Control vulnerability CVE-2023-45110 4.3 MediumJanuary 2, 2025
• bold-themes bold page builder WordPress Bold Page Builder plugin <= 5.1.5 - Path Traversal vulnerability CVE-2024-54382 4.9 MediumDecember 16, 2024
• bold-themes bold page builder WordPress Bold Page Builder plugin <= 5.2.1 - Cross Site Scripting (XSS) vulnerability CVE-2024-53801 6.5 MediumDecember 6, 2024
• bold-themes bold page builder WordPress Bold Page Builder plugin <= 5.1.3 - Broken Access Control vulnerability CVE-2024-50417 4.3 MediumNovember 19, 2024
• boldthemes reconstruction WordPress ReConstruction theme <= 1.4.7 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2024-52417 7.1 HighNovember 18, 2024
• bold-themes bold page builder WordPress Bold Page Builder plugin <= 5.1.1 - Cross Site Scripting (XSS) vulnerability CVE-2024-47298 6.5 MediumOctober 6, 2024
• bold-themes bold page builder WordPress Bold Page Builder plugin < 5.1.1 - Cross Site Scripting (XSS) vulnerability CVE-2024-47391 6.5 MediumOctober 5, 2024
• boldthemes bold timeline lite WordPress Bold Timeline Lite plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability CVE-2024-43294 6.5 MediumAugust 18, 2024
• Show olderLoading…