Advisories · Technology

boldthemes Bold Timeline Lite.

Every CVE that names boldthemes Bold Timeline Lite among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-7438 CVE record

CVSS 6.4 Medium

Bold Timeline Lite <= 1.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
- boldthemes Bold Timeline Lite
- Cross-site scripting (XSS)
Not analysed yet 11 Sept 2026
CVE-2025-68513 CVE record

CVSS 6.5 Medium

WordPress Bold Timeline Lite plugin <= 1.2.7 - Cross Site Scripting (XSS) vulnerability
- boldthemes Bold Timeline Lite
- Cross-site scripting (XSS)
Not analysed yet 24 Dec 2025
CVE-2025-14032 CVE record

CVSS 6.4 Medium

Bold Timeline Lite <= 1.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'title' Parameter in 'bold_timeline_group' Shortcode
- boldthemes Bold Timeline Lite
- Cross-site scripting (XSS)
Not analysed yet 12 Dec 2025
CVE-2023-45110 CVE record

CVSS 4.3 Medium

WordPress Bold Timeline Lite plugin <= 1.1.9 - Broken Access Control vulnerability
- boldthemes Bold Timeline Lite
- Broken access control
Not analysed yet 2 Jan 2025
CVE-2024-43294 CVE record

CVSS 6.5 Medium

WordPress Bold Timeline Lite plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability
- BoldThemes Bold Timeline Lite
- Cross-site scripting (XSS)
Not analysed yet 18 Aug 2024