# boldthemes Bold Page Builder.

Every CVE that names boldthemes Bold Page Builder among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Bold Page Builder <= 5.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'background_image' Parameter](https://agentprime.io/advisories/CVE-2026-6173.md)
  `CVE-2026-6173` · CVE record: boldthemes Bold Page Builder · CVSS 6.4 Medium · Not analysed yet · Published 30 Sept 2026 · Tags: Cross-site scripting (XSS)
- [Bold Page Builder <= 5.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_css_image_grid 'images' Shortcode Attribute](https://agentprime.io/advisories/CVE-2026-6170.md)
  `CVE-2026-6170` · CVE record: boldthemes Bold Page Builder · CVSS 6.4 Medium · Not analysed yet · Published 30 Sept 2026 · Tags: Cross-site scripting (XSS)
- [Bold Page Builder <= 5.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'target' Shortcode Attribute](https://agentprime.io/advisories/CVE-2026-6171.md)
  `CVE-2026-6171` · CVE record: boldthemes Bold Page Builder · CVSS 6.4 Medium · Not analysed yet · Published 30 Sept 2026 · Tags: Cross-site scripting (XSS)
- [Bold Page Builder <= 5.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_service title](https://agentprime.io/advisories/CVE-2026-88037.md)
  `CVE-2026-88037` · CVE record: boldthemes Bold Page Builder · CVSS 6.4 Medium · Not analysed yet · Published 30 Sept 2026 · Tags: Cross-site scripting (XSS)
- [Bold Page Builder <= 5.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'caption' Parameter](https://agentprime.io/advisories/CVE-2026-6172.md)
  `CVE-2026-6172` · CVE record: boldthemes Bold Page Builder · CVSS 6.4 Medium · Not analysed yet · Published 30 Sept 2026 · Tags: Cross-site scripting (XSS)
- [Bold Page Builder <= 5.9.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'shortcode_content' Parameter](https://agentprime.io/advisories/CVE-2026-5920.md)
  `CVE-2026-5920` · CVE record: boldthemes Bold Page Builder · CVSS 6.4 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: Cross-site scripting (XSS)
- [WordPress Bold Page Builder plugin <= 5.9.9 - Cross Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2026-62110.md)
  `CVE-2026-62110` · CVE record: boldthemes Bold Page Builder · CVSS 6.5 Medium · Not analysed yet · Published 11 Sept 2026 · Tags: Cross-site scripting (XSS)
- [Bold Page Builder <= 5.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting](https://agentprime.io/advisories/CVE-2026-2357.md)
  `CVE-2026-2357` · CVE record: boldthemes Bold Page Builder · CVSS 6.4 Medium · Not analysed yet · Published 16 Aug 2026 · Tags: Cross-site scripting (XSS)
- [Bold Page Builder <= 5.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_button Shortcode](https://agentprime.io/advisories/CVE-2026-3694.md)
  `CVE-2026-3694` · CVE record: boldthemes Bold Page Builder · CVSS 6.4 Medium · Not analysed yet · Published 14 May 2026 · Tags: Cross-site scripting (XSS)
- [WordPress Bold Page Builder plugin <= 5.6.9 - Cross Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2026-25451.md)
  `CVE-2026-25451` · CVE record: boldthemes Bold Page Builder · CVSS 6.5 Medium · Not analysed yet · Published 19 Feb 2026 · Tags: Cross-site scripting (XSS)
- [Bold Page Builder <= 5.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode](https://agentprime.io/advisories/CVE-2025-12159.md)
  `CVE-2025-12159` · CVE record: boldthemes Bold Page Builder · CVSS 6.4 Medium · Not analysed yet · Published 7 Feb 2026 · Tags: Cross-site scripting (XSS)
- [Bold Page Builder <= 5.5.3 - Authenticated (Author+) Stored DOM-based Cross-Site Scripting in Post Grid](https://agentprime.io/advisories/CVE-2025-13463.md)
  `CVE-2025-13463` · CVE record: boldthemes Bold Page Builder · CVSS 6.4 Medium · Not analysed yet · Published 7 Feb 2026 · Tags: Cross-site scripting (XSS)
- [Bold Builder <= 5.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_tabs Shortcode](https://agentprime.io/advisories/CVE-2025-12803.md)
  `CVE-2025-12803` · CVE record: boldthemes Bold Page Builder · CVSS 6.4 Medium · Not analysed yet · Published 7 Feb 2026 · Tags: Cross-site scripting (XSS)
- [Bold Page Builder <= 5.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_accordion_item Shortcode](https://agentprime.io/advisories/CVE-2025-15267.md)
  `CVE-2025-15267` · CVE record: boldthemes Bold Page Builder · CVSS 6.4 Medium · Not analysed yet · Published 7 Feb 2026 · Tags: Cross-site scripting (XSS)
- [WordPress Bold Page Builder plugin <= 5.5.2 - Cross Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2025-66057.md)
  `CVE-2025-66057` · CVE record: boldthemes Bold Page Builder · CVSS 6.5 Medium · Not analysed yet · Published 21 Nov 2025 · Tags: Cross-site scripting (XSS)
- [Bold Page Builder <= 5.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via \`percentage\` Parameter](https://agentprime.io/advisories/CVE-2025-7730.md)
  `CVE-2025-7730` · CVE record: boldthemes Bold Page Builder · CVSS 6.4 Medium · Not analysed yet · Published 23 Oct 2025 · Tags: Cross-site scripting (XSS)
- [WordPress Bold Page Builder Plugin <= 5.4.3 - Cross Site Scripting (XSS) Vulnerability](https://agentprime.io/advisories/CVE-2025-58194.md)
  `CVE-2025-58194` · CVE record: boldthemes Bold Page Builder · CVSS 6.5 Medium · Not analysed yet · Published 27 Aug 2025 · Tags: Cross-site scripting (XSS)
- [WordPress Bold Page Builder plugin <= 5.4.1 - Cross Site Scripting (XSS) Vulnerability](https://agentprime.io/advisories/CVE-2025-54006.md)
  `CVE-2025-54006` · CVE record: boldthemes Bold Page Builder · CVSS 6.5 Medium · Not analysed yet · Published 16 Jul 2025 · Tags: Cross-site scripting (XSS)
- [Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Magnific Popups JavaScript Library](https://agentprime.io/advisories/CVE-2024-5647.md)
  `CVE-2024-5647` · CVE record: blossomthemes BlossomThemes Social Feed and 4 more · CVSS 6.4 Medium · Not analysed yet · Published 3 Jul 2025 · Tags: Cross-site scripting (XSS)
- [Bold Builder <= 5.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via additional_settings Parameter](https://agentprime.io/advisories/CVE-2025-5286.md)
  `CVE-2025-5286` · CVE record: boldthemes Bold Page Builder · CVSS 6.4 Medium · Not analysed yet · Published 29 May 2025 · Tags: Cross-site scripting (XSS)
- [Bold Page Builder <= 5.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-text' Parameter](https://agentprime.io/advisories/CVE-2025-3715.md)
  `CVE-2025-3715` · CVE record: boldthemes Bold Page Builder · CVSS 6.4 Medium · Not analysed yet · Published 18 May 2025 · Tags: Cross-site scripting (XSS)
- [WordPress Bold Page Builder plugin <= 5.3.0 - Cross Site Scripting (XSS) Vulnerability](https://agentprime.io/advisories/CVE-2025-47525.md)
  `CVE-2025-47525` · CVE record: boldthemes Bold Page Builder · CVSS 5.9 Medium · Not analysed yet · Published 7 May 2025 · Tags: Cross-site scripting (XSS)
- [WordPress Bold Page Builder plugin <= 5.3.2 - Cross Site Scripting (XSS) Vulnerability](https://agentprime.io/advisories/CVE-2025-47488.md)
  `CVE-2025-47488` · CVE record: boldthemes Bold Page Builder · CVSS 6.5 Medium · Not analysed yet · Published 7 May 2025 · Tags: Cross-site scripting (XSS)
- [WordPress Bold Page Builder plugin <= 5.1.5 - Path Traversal vulnerability](https://agentprime.io/advisories/CVE-2024-54382.md)
  `CVE-2024-54382` · CVE record: boldthemes Bold Page Builder · CVSS 4.9 Medium · Not analysed yet · Published 16 Dec 2024 · Tags: Path traversal
- [WordPress Bold Page Builder plugin <= 5.2.1 - Cross Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2024-53801.md)
  `CVE-2024-53801` · CVE record: boldthemes Bold Page Builder · CVSS 6.5 Medium · Not analysed yet · Published 6 Dec 2024 · Tags: Cross-site scripting (XSS)
- [WordPress Bold Page Builder plugin <= 5.1.3 - Broken Access Control vulnerability](https://agentprime.io/advisories/CVE-2024-50417.md)
  `CVE-2024-50417` · CVE record: boldthemes Bold Page Builder · CVSS 4.3 Medium · Not analysed yet · Published 19 Nov 2024 · Tags: Broken access control
- [WordPress Bold Page Builder plugin <= 5.1.1 - Cross Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2024-47298.md)
  `CVE-2024-47298` · CVE record: boldthemes Bold Page Builder · CVSS 6.5 Medium · Not analysed yet · Published 6 Oct 2024 · Tags: Cross-site scripting (XSS)
- [WordPress Bold Page Builder plugin < 5.1.1 - Cross Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2024-47391.md)
  `CVE-2024-47391` · CVE record: boldthemes Bold Page Builder · CVSS 6.5 Medium · Not analysed yet · Published 5 Oct 2024 · Tags: Cross-site scripting (XSS)
- [Bold Page Builder <= 5.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_button Shortcode](https://agentprime.io/advisories/CVE-2024-7100.md)
  `CVE-2024-7100` · CVE record: boldthemes Bold Page Builder · CVSS 6.4 Medium · Not analysed yet · Published 30 Jul 2024 · Tags: Cross-site scripting (XSS)
- [Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via HTML Tags](https://agentprime.io/advisories/CVE-2024-2736.md)
  `CVE-2024-2736` · CVE record: boldthemes Bold Page Builder · CVSS 6.4 Medium · Not analysed yet · Published 10 Apr 2024 · Tags: Cross-site scripting (XSS)
- [Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via "Price List" Element](https://agentprime.io/advisories/CVE-2024-2735.md)
  `CVE-2024-2735` · CVE record: boldthemes Bold Page Builder · CVSS 6.4 Medium · Not analysed yet · Published 10 Apr 2024 · Tags: Cross-site scripting (XSS)
- [Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via AI Features](https://agentprime.io/advisories/CVE-2024-2734.md)
  `CVE-2024-2734` · CVE record: boldthemes Bold Page Builder · CVSS 6.4 Medium · Not analysed yet · Published 10 Apr 2024 · Tags: Cross-site scripting (XSS)
- [Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Separator Element](https://agentprime.io/advisories/CVE-2024-2733.md)
  `CVE-2024-2733` · CVE record: boldthemes Bold Page Builder · CVSS 5.4 Medium · Not analysed yet · Published 10 Apr 2024 · Tags: Cross-site scripting (XSS)
- [Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_price_list Shortcode](https://agentprime.io/advisories/CVE-2024-3267.md)
  `CVE-2024-3267` · CVE record: boldthemes Bold Page Builder · CVSS 6.4 Medium · Not analysed yet · Published 9 Apr 2024 · Tags: Cross-site scripting (XSS)
- [Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widget URL Attribute](https://agentprime.io/advisories/CVE-2024-3266.md)
  `CVE-2024-3266` · CVE record: boldthemes Bold Page Builder · CVSS 6.4 Medium · Not analysed yet · Published 9 Apr 2024 · Tags: Cross-site scripting (XSS)
- [WordPress Bold Page Builder plugin <= 4.8.0 - Cross Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2024-30442.md)
  `CVE-2024-30442` · CVE record: BoldThemes Bold Page Builder · CVSS 6.5 Medium · Not analysed yet · Published 29 Mar 2024 · Tags: Cross-site scripting (XSS)
- [WordPress Bold Page Builder plugin <= 4.7.6 - Cross Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2024-30179.md)
  `CVE-2024-30179` · CVE record: BoldThemes Bold Page Builder · CVSS 6.5 Medium · Not analysed yet · Published 27 Mar 2024 · Tags: Cross-site scripting (XSS)
- [Bold Page Builder <= 4.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Raw Content](https://agentprime.io/advisories/CVE-2024-1159.md)
  `CVE-2024-1159` · CVE record: boldthemes Bold Page Builder · CVSS 6.4 Medium · Not analysed yet · Published 13 Feb 2024 · Tags: Cross-site scripting (XSS)
- [Bold Page Builder <= 4.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button URL](https://agentprime.io/advisories/CVE-2024-1157.md)
  `CVE-2024-1157` · CVE record: boldthemes Bold Page Builder · CVSS 5.4 Medium · Not analysed yet · Published 13 Feb 2024 · Tags: Cross-site scripting (XSS)
- [Bold Page Builder <= 4.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Icon Link](https://agentprime.io/advisories/CVE-2024-1160.md)
  `CVE-2024-1160` · CVE record: boldthemes Bold Page Builder · CVSS 5.4 Medium · Not analysed yet · Published 13 Feb 2024 · Tags: Cross-site scripting (XSS)
- [WordPress Bold Page Builder Plugin <= 4.6.1 is vulnerable to Cross Site Scripting (XSS)](https://agentprime.io/advisories/CVE-2023-49823.md)
  `CVE-2023-49823` · CVE record: BoldThemes Bold Page Builder · CVSS 6.5 Medium · Not analysed yet · Published 15 Dec 2023 · Tags: Cross-site scripting (XSS)

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=boldthemes-bold-page-builder>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/boldthemes-bold-page-builder/>. Everything for agents: <https://agentprime.io/llms.txt>.