BoldThemes Bold Timeline Lite

• CVE-2026-7438 Medium 6.4 Bold Timeline Lite <= 1.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes 0.4%
• CVE-2025-68513 Medium 6.5 WordPress Bold Timeline Lite plugin <= 1.2.7 - Cross Site Scripting (XSS) vulnerability 0.2%
• CVE-2025-14032 Medium 6.4 Bold Timeline Lite <= 1.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'title' Parameter in 'bold_timeline_group' Shortcode 0.3%
• CVE-2023-45110 Medium 4.3 WordPress Bold Timeline Lite plugin <= 1.1.9 - Broken Access Control vulnerability 0.4%
• CVE-2024-43294 Medium 6.5 WordPress Bold Timeline Lite plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability 0.3%