BP
Product
Bold Page Builder
41
CVEs
0
On KEV
8.8
Max CVSS
5
New 30D
Severity mix
Critical 0High 1Medium 40Low 0
Watch
Add Bold Page Builder to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-50417 | 8.8 | Nov 19 | WordPress Bold Page Builder plugin <= 5.1.3 - Broken Access Control vulnerability Affected: through 5.1.3 |
| CVE-2026-62110 | 6.5 | Sep 11 | WordPress Bold Page Builder plugin <= 5.9.9 - Cross Site Scripting (XSS) vulnerability Affected: through 5.9.9 |
| CVE-2026-25451 | 6.5 | Feb 19 | WordPress Bold Page Builder plugin <= 5.6.9 - Cross Site Scripting (XSS) vulnerability Affected: through 5.6.9 |
| CVE-2025-66057 | 6.5 | Nov 21 | WordPress Bold Page Builder plugin <= 5.5.2 - Cross Site Scripting (XSS) vulnerability Affected: through 5.5.2 |
| CVE-2025-58194 | 6.5 | Aug 27 | WordPress Bold Page Builder Plugin <= 5.4.3 - Cross Site Scripting (XSS) Vulnerability Affected: through 5.4.3 |
| CVE-2025-54006 | 6.5 | Jul 16 | WordPress Bold Page Builder plugin <= 5.4.1 - Cross Site Scripting (XSS) Vulnerability Affected: through 5.4.1 |
| CVE-2025-47488 | 6.5 | May 7 | WordPress Bold Page Builder plugin <= 5.3.2 - Cross Site Scripting (XSS) Vulnerability Affected: through 5.3.2 |
| CVE-2026-6173 | 6.4 | Sep 30 | Bold Page Builder <= 5.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'background_image' Parameter Affected: through 5.7.2 |
| CVE-2026-6170 | 6.4 | Sep 30 | Bold Page Builder <= 5.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_css_image_grid 'images' Shortcode Attribute Affected: through 5.7.2 |
| CVE-2026-6171 | 6.4 | Sep 30 | Bold Page Builder <= 5.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'target' Shortcode Attribute Affected: through 5.7.2 |
| CVE-2026-88037 | 6.4 | Sep 30 | Bold Page Builder <= 5.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_service title Affected: through 5.7.2 |
| CVE-2026-6172 | 6.4 | Sep 30 | Bold Page Builder <= 5.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'caption' Parameter Affected: through 5.7.2 |
| CVE-2026-5920 | 6.4 | Sep 16 | Bold Page Builder <= 5.9.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'shortcode_content' Parameter Affected: through 5.9.6 |
| CVE-2026-2357 | 6.4 | Aug 16 | Bold Page Builder <= 5.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: through 5.6.8 |
| CVE-2026-3694 | 6.4 | May 14 | Bold Page Builder <= 5.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_button Shortcode Affected: through 5.6.8 |
| CVE-2025-12159 | 6.4 | Feb 7 | Bold Page Builder <= 5.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Affected: through 5.4.8 |
| CVE-2025-13463 | 6.4 | Feb 7 | Bold Page Builder <= 5.5.3 - Authenticated (Author+) Stored DOM-based Cross-Site Scripting in Post Grid Affected: through 5.5.3 |
| CVE-2025-12803 | 6.4 | Feb 7 | Bold Builder <= 5.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_tabs Shortcode Affected: through 5.5.1 |
| CVE-2025-15267 | 6.4 | Feb 7 | Bold Page Builder <= 5.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_accordion_item Shortcode Affected: through 5.6.1 |
| CVE-2025-7730 | 6.4 | Oct 23 | Bold Page Builder <= 5.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via `percentage` Parameter Affected: through 5.4.5 |
| CVE-2024-5647 | 6.4 | Jul 3 | Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Magnific Popups JavaScript Library Affected: through 5.1.2 |
| CVE-2025-5286 | 6.4 | May 29 | Bold Builder <= 5.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via additional_settings Parameter Affected: through 5.3.6 |
| CVE-2025-3715 | 6.4 | May 18 | Bold Page Builder <= 5.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-text' Parameter Affected: through 5.3.5 |
| CVE-2025-47525 | 5.9 | May 7 | WordPress Bold Page Builder plugin <= 5.3.0 - Cross Site Scripting (XSS) Vulnerability Affected: through 5.3.0 |
| CVE-2024-53801 | 5.4 | Dec 6 | WordPress Bold Page Builder plugin <= 5.2.1 - Cross Site Scripting (XSS) vulnerability Affected: through 5.2.1 |
| CVE-2024-47298 | 5.4 | Oct 6 | WordPress Bold Page Builder plugin <= 5.1.1 - Cross Site Scripting (XSS) vulnerability Affected: through 5.1.1 |
| CVE-2024-47391 | 5.4 | Oct 5 | WordPress Bold Page Builder plugin < 5.1.1 - Cross Site Scripting (XSS) vulnerability Affected: through 5.1.1 |
| CVE-2024-7100 | 5.4 | Jul 30 | Bold Page Builder <= 5.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_button Shortcode Affected: through 5.0.2 |
| CVE-2024-2736 | 5.4 | Apr 10 | Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via HTML Tags Affected: through 4.8.8 |
| CVE-2024-2735 | 5.4 | Apr 10 | Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via "Price List" Element Affected: through 4.8.8 |
| CVE-2024-2734 | 5.4 | Apr 10 | Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via AI Features Affected: through 4.8.8 |
| CVE-2024-2733 | 5.4 | Apr 10 | Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Separator Element Affected: through 4.8.8 |
| CVE-2024-3267 | 5.4 | Apr 9 | Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_price_list Shortcode Affected: through 4.8.8 |
| CVE-2024-3266 | 5.4 | Apr 9 | Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widget URL Attribute Affected: through 4.8.8 |
| CVE-2024-30442 | 5.4 | Mar 29 | WordPress Bold Page Builder plugin <= 4.8.0 - Cross Site Scripting (XSS) vulnerability Affected: through 4.8.0 |
| CVE-2024-30179 | 5.4 | Mar 27 | WordPress Bold Page Builder plugin <= 4.7.6 - Cross Site Scripting (XSS) vulnerability Affected: through 4.7.6 |
| CVE-2024-1159 | 5.4 | Feb 13 | Bold Page Builder <= 4.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Raw Content Affected: through 4.8.0 |
| CVE-2024-1157 | 5.4 | Feb 13 | Bold Page Builder <= 4.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button URL Affected: through 4.8.0 |
| CVE-2024-1160 | 5.4 | Feb 13 | Bold Page Builder <= 4.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Icon Link Affected: through 4.8.0 |
| CVE-2023-49823 | 5.4 | Dec 15 | WordPress Bold Page Builder Plugin <= 4.6.1 is vulnerable to Cross Site Scripting (XSS) Affected: through 4.6.1 |
| CVE-2024-54382 | 4.9 | Dec 16 | WordPress Bold Page Builder plugin <= 5.1.5 - Path Traversal vulnerability Affected: through 5.1.5 |
Showing 41