Skip to content

Boldthemes vulnerabilities

Products

Newest

bold-themes bold page builderBold Page Builder <= 5.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_button ShortcodeCVE-2024-71006.4 MediumJuly 30, 2024
bold-themes bold page builderBold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via HTML TagsCVE-2024-27366.4 MediumApril 10, 2024
bold-themes bold page builderBold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via "Price List" ElementCVE-2024-27356.4 MediumApril 10, 2024
bold-themes bold page builderBold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via AI FeaturesCVE-2024-27346.4 MediumApril 10, 2024
bold-themes bold page builderBold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Separator ElementCVE-2024-27335.4 MediumApril 10, 2024
bold-themes bold page builderBold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_price_list ShortcodeCVE-2024-32676.4 MediumApril 9, 2024
bold-themes bold page builderBold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widget URL AttributeCVE-2024-32666.4 MediumApril 9, 2024
bold-themes bold page builderWordPress Bold Page Builder plugin <= 4.8.0 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-304426.5 MediumMarch 29, 2024
bold-themes bold page builderWordPress Bold Page Builder plugin <= 4.7.6 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-301796.5 MediumMarch 27, 2024
bold-themes bold page builderBold Page Builder <= 4.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Raw ContentCVE-2024-11596.4 MediumFebruary 13, 2024
bold-themes bold page builderBold Page Builder <= 4.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Icon LinkCVE-2024-11605.4 MediumFebruary 13, 2024
bold-themes bold page builderBold Page Builder <= 4.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button URLCVE-2024-11575.4 MediumFebruary 13, 2024
bold-themes bold page builderWordPress Bold Page Builder Plugin <= 4.6.1 is vulnerable to Cross Site Scripting (XSS)CVE-2023-498236.5 MediumDecember 15, 2023
bold-themes bold timeline liteBold Timeline Lite < 1.1.5 - Contributor+ Stored XSS via ShortcodeCVE-2022-48285.4 MediumJanuary 30, 2023
bold-themes bold page builderBold Page Builder < 4.3.3 - Admin+ Stored Cross-Site ScriptingCVE-2022-20894.8 MediumJuly 11, 2022
bold-themes bold page builderBold Page Builder < 3.1.6 - PHP Object InjectionCVE-2021-245798.8 HighAugust 30, 2021
bold-themes bello, boldthemes bello - directory & listing +1 moreBello < 1.6.0 - Unauthenticated Blind SQL InjectionCVE-2021-24321EPSS 66.6%9.8 CriticalJune 1, 2021
bold-themes bello, boldthemes bello - directory & listing +1 moreBello < 1.6.0 - Unauthenticated Reflected XSS & XFSCVE-2021-24320EPSS 10.8%6.1 MediumJune 1, 2021
bold-themes bello, boldthemes bello - directory & listing +1 moreBello < 1.6.0 - Authenticated Cross-Site Scripting (XSS) and XFSCVE-2021-243195.4 MediumJune 1, 2021