BoldThemes Bold Page Builder

• CVE-2026-6173 Medium 6.4 Bold Page Builder <= 5.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'background_image' Parameter 0.2%
• CVE-2026-6170 Medium 6.4 Bold Page Builder <= 5.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_css_image_grid 'images' Shortcode Attribute 0.2%
• CVE-2026-6171 Medium 6.4 Bold Page Builder <= 5.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'target' Shortcode Attribute 0.2%
• CVE-2026-88037 Medium 6.4 Bold Page Builder <= 5.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_service title 0.2%
• CVE-2026-6172 Medium 6.4 Bold Page Builder <= 5.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'caption' Parameter 0.2%
• CVE-2026-5920 Medium 6.4 Bold Page Builder <= 5.9.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'shortcode_content' Parameter 0.3%
• CVE-2026-62110 Medium 6.5 WordPress Bold Page Builder plugin <= 5.9.9 - Cross Site Scripting (XSS) vulnerability 0.2%
• CVE-2026-2357 Medium 6.4 Bold Page Builder <= 5.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%
• CVE-2026-3694 Medium 6.4 Bold Page Builder <= 5.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_button Shortcode 0.2%
• CVE-2026-25451 Medium 6.5 WordPress Bold Page Builder plugin <= 5.6.9 - Cross Site Scripting (XSS) vulnerability 0.2%
• CVE-2025-12159 Medium 6.4 Bold Page Builder <= 5.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode 0.2%
• CVE-2025-13463 Medium 6.4 Bold Page Builder <= 5.5.3 - Authenticated (Author+) Stored DOM-based Cross-Site Scripting in Post Grid 0.3%
• CVE-2025-12803 Medium 6.4 Bold Builder <= 5.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_tabs Shortcode 0.3%
• CVE-2025-15267 Medium 6.4 Bold Page Builder <= 5.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_accordion_item Shortcode 0.3%
• CVE-2025-66057 Medium 6.5 WordPress Bold Page Builder plugin <= 5.5.2 - Cross Site Scripting (XSS) vulnerability 0.2%
• CVE-2025-7730 Medium 6.4 Bold Page Builder <= 5.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via `percentage` Parameter 0.2%
• CVE-2025-58194 Medium 6.5 WordPress Bold Page Builder Plugin <= 5.4.3 - Cross Site Scripting (XSS) Vulnerability 0.2%
• CVE-2025-54006 Medium 6.5 WordPress Bold Page Builder plugin <= 5.4.1 - Cross Site Scripting (XSS) Vulnerability 0.2%
• CVE-2024-5647 Medium 6.4 Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Magnific Popups JavaScript Library 0.4%
• CVE-2025-5286 Medium 6.4 Bold Builder <= 5.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via additional_settings Parameter 0.4%
• CVE-2025-3715 Medium 6.4 Bold Page Builder <= 5.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-text' Parameter 0.3%
• CVE-2025-47525 Medium 5.9 WordPress Bold Page Builder plugin <= 5.3.0 - Cross Site Scripting (XSS) Vulnerability 0.3%
• CVE-2025-47488 Medium 6.5 WordPress Bold Page Builder plugin <= 5.3.2 - Cross Site Scripting (XSS) Vulnerability 0.3%
• CVE-2024-54382 Medium 4.9 WordPress Bold Page Builder plugin <= 5.1.5 - Path Traversal vulnerability 2.2%
• CVE-2024-53801 Medium 6.5 WordPress Bold Page Builder plugin <= 5.2.1 - Cross Site Scripting (XSS) vulnerability 0.4%
• CVE-2024-50417 Medium 4.3 WordPress Bold Page Builder plugin <= 5.1.3 - Broken Access Control vulnerability 1.9%
• CVE-2024-47298 Medium 6.5 WordPress Bold Page Builder plugin <= 5.1.1 - Cross Site Scripting (XSS) vulnerability 0.3%
• CVE-2024-47391 Medium 6.5 WordPress Bold Page Builder plugin < 5.1.1 - Cross Site Scripting (XSS) vulnerability 0.3%
• CVE-2024-7100 Medium 6.4 Bold Page Builder <= 5.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_button Shortcode 0.4%
• CVE-2024-2736 Medium 6.4 Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via HTML Tags 0.5%
• CVE-2024-2735 Medium 6.4 Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via "Price List" Element 0.5%
• CVE-2024-2734 Medium 6.4 Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via AI Features 0.5%
• CVE-2024-2733 Medium 5.4 Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Separator Element 0.5%
• CVE-2024-3267 Medium 6.4 Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_price_list Shortcode 0.4%
• CVE-2024-3266 Medium 6.4 Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widget URL Attribute 0.4%
• CVE-2024-30442 Medium 6.5 WordPress Bold Page Builder plugin <= 4.8.0 - Cross Site Scripting (XSS) vulnerability 0.3%
• CVE-2024-30179 Medium 6.5 WordPress Bold Page Builder plugin <= 4.7.6 - Cross Site Scripting (XSS) vulnerability 0.4%
• CVE-2024-1159 Medium 6.4 Bold Page Builder <= 4.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Raw Content 0.4%
• CVE-2024-1157 Medium 5.4 Bold Page Builder <= 4.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button URL 0.4%
• CVE-2024-1160 Medium 5.4 Bold Page Builder <= 4.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Icon Link 0.4%
• CVE-2023-49823 Medium 6.5 WordPress Bold Page Builder Plugin <= 4.6.1 is vulnerable to Cross Site Scripting (XSS) 0.5%