BT
Product
Bold Timeline Lite
by boldthemes · last CVE Sep 11, 2026
5
CVEs
0
On KEV
6.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 5Low 0
Watch

Add Bold Timeline Lite to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-68513
6.5
0%
Dec 24
WordPress Bold Timeline Lite plugin <= 1.2.7 - Cross Site Scripting (XSS) vulnerability
Affected: through 1.2.7
CVE-2024-43294
6.5
0%
Aug 18
WordPress Bold Timeline Lite plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability
Affected: through 1.2.0
CVE-2026-7438
6.4
0%
Sep 11
Bold Timeline Lite <= 1.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Affected: through 1.2.8
CVE-2025-14032
6.4
0%
Dec 12
Bold Timeline Lite <= 1.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'title' Parameter in 'bold_timeline_group' Shortcode
Affected: through 1.2.7
CVE-2023-45110
4.3
0%
Jan 2
WordPress Bold Timeline Lite plugin <= 1.1.9 - Broken Access Control vulnerability
Affected: through 1.1.9
Showing 5