Boldthemes vulnerabilities
63 CVEs and advisories name Boldthemes as an affected vendor, newest first. Follow it as a feed.
- CVE-2025-54006WordPress Bold Page Builder plugin <= 5.4.1 - Cross Site Scripting (XSS) Vulnerability
- CVE-2024-5647Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Magnific Popups JavaScript Library
- CVE-2025-52724WordPress Amwerk theme <= 1.2.0 - PHP Object Injection Vulnerability
- CVE-2025-5286Bold Builder <= 5.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via additional_settings Parameter
- CVE-2025-39495WordPress Avantage Theme <= 2.4.9 - PHP Object Injection vulnerability
- CVE-2025-39499WordPress Medicare Theme <= 2.1.0 - PHP Object Injection vulnerability
- CVE-2025-3715Bold Page Builder <= 5.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-text' Parameter
- CVE-2025-47525WordPress Bold Page Builder plugin <= 5.3.0 - Cross Site Scripting (XSS) Vulnerability
- CVE-2025-47488WordPress Bold Page Builder plugin <= 5.3.2 - Cross Site Scripting (XSS) Vulnerability
- CVE-2023-45110WordPress Bold Timeline Lite plugin <= 1.1.9 - Broken Access Control vulnerability
- CVE-2024-54382WordPress Bold Page Builder plugin <= 5.1.5 - Path Traversal vulnerability
- CVE-2024-53801WordPress Bold Page Builder plugin <= 5.2.1 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-50417WordPress Bold Page Builder plugin <= 5.1.3 - Broken Access Control vulnerability
- CVE-2024-52417WordPress ReConstruction theme <= 1.4.7 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2024-47298WordPress Bold Page Builder plugin <= 5.1.1 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-47391WordPress Bold Page Builder plugin < 5.1.1 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-43294WordPress Bold Timeline Lite plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-7100Bold Page Builder <= 5.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_button Shortcode
- CVE-2024-2736Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via HTML Tags
- CVE-2024-2735Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via "Price List" Element
- CVE-2024-2734Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via AI Features
- CVE-2024-2733Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Separator Element
- CVE-2024-3267Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_price_list Shortcode
- CVE-2024-3266Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widget URL Attribute
- CVE-2024-30442WordPress Bold Page Builder plugin <= 4.8.0 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-30179WordPress Bold Page Builder plugin <= 4.7.6 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-1159Bold Page Builder <= 4.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Raw Content
- CVE-2024-1157Bold Page Builder <= 4.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button URL
- CVE-2024-1160Bold Page Builder <= 4.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Icon Link
- CVE-2023-49823WordPress Bold Page Builder Plugin <= 4.6.1 is vulnerable to Cross Site Scripting (XSS)