Skip to contentBoldthemes Bold Page Builder vulnerabilities
- bold themes page builder, boldthemes bold page builder +1 moreWordPress Bold Page Builder plugin <= 5.9.11 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-1256806.5 Medium
- bold themes page builder, boldthemes bold page builder +1 moreWordPress Bold Page Builder plugin <= 5.9.11 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-1254556.5 Medium
- boldthemes bold page builderBold Page Builder <= 5.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'background_image' ParameterCVE-2026-61736.4 Medium
- boldthemes bold page builderBold Page Builder <= 5.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'target' Shortcode AttributeCVE-2026-61716.4 Medium
- boldthemes bold page builderBold Page Builder <= 5.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_css_image_grid 'images' Shortcode AttributeCVE-2026-61706.4 Medium
- boldthemes bold page builderBold Page Builder <= 5.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_service titleCVE-2026-880376.4 Medium
- boldthemes bold page builderBold Page Builder <= 5.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'caption' ParameterCVE-2026-61726.4 Medium
- boldthemes bold page builderBold Page Builder <= 5.9.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'shortcode_content' ParameterCVE-2026-59206.4 Medium
- boldthemes bold page builderWordPress Bold Page Builder plugin <= 5.9.9 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-621106.5 Medium
- boldthemes bold page builderBold Page Builder < 5.9.9 - Contributor+ Stored XSS via Slider Elements' additional_settingsCVE-2026-840286.8 Medium
- boldthemes bold page builderBold Page Builder < 5.9.8 - Contributor+ Stored XSS via Multiple Shortcode Element AttributesCVE-2026-840226.8 Medium
- boldthemes bold page builderBold Page Builder < 5.9.8 - Contributor+ Stored XSS via bt_bb_button/bt_bb_headline/bt_bb_icon URLCVE-2026-840216.8 Medium
- boldthemes bold page builderBold Page Builder <= 5.6.8 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2026-23576.4 Medium
- boldthemes bold page builderBold Page Builder <= 5.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_button ShortcodeCVE-2026-36946.4 Medium
- boldthemes bold page builderWordPress Bold Page Builder plugin <= 5.6.9 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-254516.5 Medium
- boldthemes bold page builderBold Page Builder <= 5.5.3 - Authenticated (Author+) Stored DOM-based Cross-Site Scripting in Post GridCVE-2025-134636.4 Medium
- boldthemes bold page builderBold Page Builder <= 5.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeCVE-2025-121596.4 Medium
- boldthemes bold page builderBold Builder <= 5.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_tabs ShortcodeCVE-2025-128036.4 Medium
- boldthemes bold page builderBold Page Builder <= 5.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_accordion_item ShortcodeCVE-2025-152676.4 Medium
- boldthemes bold page builderWordPress Bold Page Builder plugin <= 5.5.2 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-660576.5 Medium
- boldthemes bold page builderBold Page Builder <= 5.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via `percentage` ParameterCVE-2025-77306.4 Medium
- boldthemes bold page builderWordPress Bold Page Builder Plugin <= 5.4.3 - Cross Site Scripting (XSS) VulnerabilityCVE-2025-581946.5 Medium
- boldthemes bold page builderWordPress Bold Page Builder plugin <= 5.4.1 - Cross Site Scripting (XSS) VulnerabilityCVE-2025-540066.5 Medium
- badhonrocks divi torque lite, blossomthemes social feed, boldthemes bold page builder +12 more +14 moreMultiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Magnific Popups JavaScript LibraryCVE-2024-56476.4 Medium
- boldthemes bold page builderBold Builder <= 5.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via additional_settings ParameterCVE-2025-52866.4 Medium
- boldthemes bold page builderBold Page Builder <= 5.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-text' ParameterCVE-2025-37156.4 Medium
- boldthemes bold page builderWordPress Bold Page Builder plugin <= 5.3.0 - Cross Site Scripting (XSS) VulnerabilityCVE-2025-475255.9 Medium
- boldthemes bold page builderWordPress Bold Page Builder plugin <= 5.3.2 - Cross Site Scripting (XSS) VulnerabilityCVE-2025-474886.5 Medium
- bold-themes bold page builderWordPress Bold Page Builder plugin <= 5.1.5 - Path Traversal vulnerabilityCVE-2024-543824.9 Medium
- bold-themes bold page builderWordPress Bold Page Builder plugin <= 5.2.1 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-538016.5 Medium
- bold-themes bold page builderWordPress Bold Page Builder plugin <= 5.1.3 - Broken Access Control vulnerabilityCVE-2024-504174.3 Medium
- bold-themes bold page builderWordPress Bold Page Builder plugin <= 5.1.1 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-472986.5 Medium
- bold-themes bold page builderWordPress Bold Page Builder plugin < 5.1.1 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-473916.5 Medium
- bold-themes bold page builderBold Page Builder <= 5.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_button ShortcodeCVE-2024-71006.4 Medium
- bold-themes bold page builderBold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via HTML TagsCVE-2024-27366.4 Medium
- bold-themes bold page builderBold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via "Price List" ElementCVE-2024-27356.4 Medium
- bold-themes bold page builderBold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via AI FeaturesCVE-2024-27346.4 Medium
- bold-themes bold page builderBold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Separator ElementCVE-2024-27335.4 Medium
- bold-themes bold page builderBold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_price_list ShortcodeCVE-2024-32676.4 Medium
- bold-themes bold page builderBold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widget URL AttributeCVE-2024-32666.4 Medium
- bold-themes bold page builderWordPress Bold Page Builder plugin <= 4.8.0 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-304426.5 Medium
- bold-themes bold page builderWordPress Bold Page Builder plugin <= 4.7.6 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-301796.5 Medium
- bold-themes bold page builderBold Page Builder <= 4.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Raw ContentCVE-2024-11596.4 Medium
- bold-themes bold page builderBold Page Builder <= 4.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Icon LinkCVE-2024-11605.4 Medium
- bold-themes bold page builderBold Page Builder <= 4.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button URLCVE-2024-11575.4 Medium
- bold-themes bold page builderWordPress Bold Page Builder Plugin <= 4.6.1 is vulnerable to Cross Site Scripting (XSS)CVE-2023-498236.5 Medium
- bold-themes bold page builderBold Page Builder < 4.3.3 - Admin+ Stored Cross-Site ScriptingCVE-2022-20894.8 Medium
- bold-themes bold page builderBold Page Builder < 3.1.6 - PHP Object InjectionCVE-2021-245798.8 High