Advisories · Technology
boldthemes Bold Page Builder.
Every CVE that names boldthemes Bold Page Builder among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.4 Medium
Bold Page Builder <= 5.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'background_image' Parameter
- boldthemes Bold Page Builder
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Bold Page Builder <= 5.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_css_image_grid 'images' Shortcode Attribute
- boldthemes Bold Page Builder
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Bold Page Builder <= 5.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'target' Shortcode Attribute
- boldthemes Bold Page Builder
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Bold Page Builder <= 5.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_service title
- boldthemes Bold Page Builder
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Bold Page Builder <= 5.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'caption' Parameter
- boldthemes Bold Page Builder
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Bold Page Builder <= 5.9.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'shortcode_content' Parameter
- boldthemes Bold Page Builder
- Cross-site scripting (XSS)
- CVSS 6.5 Medium
WordPress Bold Page Builder plugin <= 5.9.9 - Cross Site Scripting (XSS) vulnerability
- boldthemes Bold Page Builder
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Bold Page Builder <= 5.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
- boldthemes Bold Page Builder
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Bold Page Builder <= 5.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_button Shortcode
- boldthemes Bold Page Builder
- Cross-site scripting (XSS)
- CVSS 6.5 Medium
WordPress Bold Page Builder plugin <= 5.6.9 - Cross Site Scripting (XSS) vulnerability
- boldthemes Bold Page Builder
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Bold Page Builder <= 5.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- boldthemes Bold Page Builder
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Bold Page Builder <= 5.5.3 - Authenticated (Author+) Stored DOM-based Cross-Site Scripting in Post Grid
- boldthemes Bold Page Builder
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Bold Builder <= 5.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_tabs Shortcode
- boldthemes Bold Page Builder
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Bold Page Builder <= 5.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_accordion_item Shortcode
- boldthemes Bold Page Builder
- Cross-site scripting (XSS)
- CVSS 6.5 Medium
WordPress Bold Page Builder plugin <= 5.5.2 - Cross Site Scripting (XSS) vulnerability
- boldthemes Bold Page Builder
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Bold Page Builder <= 5.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via `percentage` Parameter
- boldthemes Bold Page Builder
- Cross-site scripting (XSS)
- CVSS 6.5 Medium
WordPress Bold Page Builder Plugin <= 5.4.3 - Cross Site Scripting (XSS) Vulnerability
- boldthemes Bold Page Builder
- Cross-site scripting (XSS)
- CVSS 6.5 Medium
WordPress Bold Page Builder plugin <= 5.4.1 - Cross Site Scripting (XSS) Vulnerability
- boldthemes Bold Page Builder
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Magnific Popups JavaScript Library
- BlossomThemes Social Feed
- sayful Carousel Slider
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Bold Builder <= 5.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via additional_settings Parameter
- boldthemes Bold Page Builder
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Bold Page Builder <= 5.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-text' Parameter
- boldthemes Bold Page Builder
- Cross-site scripting (XSS)
- CVSS 5.9 Medium
WordPress Bold Page Builder plugin <= 5.3.0 - Cross Site Scripting (XSS) Vulnerability
- boldthemes Bold Page Builder
- Cross-site scripting (XSS)
- CVSS 6.5 Medium
WordPress Bold Page Builder plugin <= 5.3.2 - Cross Site Scripting (XSS) Vulnerability
- boldthemes Bold Page Builder
- Cross-site scripting (XSS)
- CVSS 4.9 Medium
WordPress Bold Page Builder plugin <= 5.1.5 - Path Traversal vulnerability
- boldthemes Bold Page Builder
- Path traversal
- CVSS 6.5 Medium
WordPress Bold Page Builder plugin <= 5.2.1 - Cross Site Scripting (XSS) vulnerability
- boldthemes Bold Page Builder
- Cross-site scripting (XSS)
- CVSS 4.3 Medium
WordPress Bold Page Builder plugin <= 5.1.3 - Broken Access Control vulnerability
- boldthemes Bold Page Builder
- Broken access control
- CVSS 6.5 Medium
WordPress Bold Page Builder plugin <= 5.1.1 - Cross Site Scripting (XSS) vulnerability
- boldthemes Bold Page Builder
- Cross-site scripting (XSS)
- CVSS 6.5 Medium
WordPress Bold Page Builder plugin < 5.1.1 - Cross Site Scripting (XSS) vulnerability
- boldthemes Bold Page Builder
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Bold Page Builder <= 5.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_button Shortcode
- boldthemes Bold Page Builder
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via HTML Tags
- boldthemes Bold Page Builder
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via "Price List" Element
- boldthemes Bold Page Builder
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via AI Features
- boldthemes Bold Page Builder
- Cross-site scripting (XSS)
- CVSS 5.4 Medium
Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Separator Element
- boldthemes Bold Page Builder
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_price_list Shortcode
- boldthemes Bold Page Builder
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widget URL Attribute
- boldthemes Bold Page Builder
- Cross-site scripting (XSS)
- CVSS 6.5 Medium
WordPress Bold Page Builder plugin <= 4.8.0 - Cross Site Scripting (XSS) vulnerability
- BoldThemes Bold Page Builder
- Cross-site scripting (XSS)
- CVSS 6.5 Medium
WordPress Bold Page Builder plugin <= 4.7.6 - Cross Site Scripting (XSS) vulnerability
- BoldThemes Bold Page Builder
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Bold Page Builder <= 4.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Raw Content
- boldthemes Bold Page Builder
- Cross-site scripting (XSS)
- CVSS 5.4 Medium
Bold Page Builder <= 4.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button URL
- boldthemes Bold Page Builder
- Cross-site scripting (XSS)
- CVSS 5.4 Medium
Bold Page Builder <= 4.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Icon Link
- boldthemes Bold Page Builder
- Cross-site scripting (XSS)
- CVSS 6.5 Medium
WordPress Bold Page Builder Plugin <= 4.6.1 is vulnerable to Cross Site Scripting (XSS)
- BoldThemes Bold Page Builder
- Cross-site scripting (XSS)