Login Request a demo
BO
Vendor
boldthemes
16 products with CVEs on record
60
CVEs
0
On KEV
6
New 30D
Products
BP
Bold Page Builder
boldthemes
8.8
41 CVEs0 on KEV5 new
AV
Avala
BoldThemes
9.8
1 CVEs0 on KEV1 new
BT
Bold Timeline Lite
boldthemes
6.5
5 CVEs0 on KEV0 new
AD
Addison
BoldThemes
9.8
1 CVEs0 on KEV0 new
AM
Amwerk
BoldThemes
9.8
1 CVEs0 on KEV0 new
AV
Avantage
BoldThemes
9.8
1 CVEs0 on KEV0 new
CE
Celeste
BoldThemes
8.1
1 CVEs0 on KEV0 new
CO
Codiqa
BoldThemes
9.8
1 CVEs0 on KEV0 new
DE
DentiCare
BoldThemes
9.8
1 CVEs0 on KEV0 new
GO
Goldenblatt
BoldThemes
9.8
1 CVEs0 on KEV0 new
IP
Ippsum
BoldThemes
9.8
1 CVEs0 on KEV0 new
ME
Medicare
BoldThemes
9.8
1 CVEs0 on KEV0 new
NE
Nestin
BoldThemes
9.8
1 CVEs0 on KEV0 new
NI
Nifty
BoldThemes
9.8
1 CVEs0 on KEV0 new
RE
ReConstruction
BoldThemes
7.1
1 CVEs0 on KEV0 new
TR
Travelicious
BoldThemes
9.8
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-62077
AV
Avala
BoldThemes
9.8
0%
Oct 10WordPress Avala theme <= 1.1.4 - PHP Object Injection vulnerability
CVE-2026-6173
BP
Bold Page Builder
boldthemes
6.4
0%
Sep 30Bold Page Builder <= 5.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'background_image' Parameter
CVE-2026-6170
BP
Bold Page Builder
boldthemes
6.4
0%
Sep 30Bold Page Builder <= 5.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_css_image_grid 'images' Shortcode Attribute
CVE-2026-6171
BP
Bold Page Builder
boldthemes
6.4
0%
Sep 30Bold Page Builder <= 5.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'target' Shortcode Attribute
CVE-2026-88037
BP
Bold Page Builder
boldthemes
6.4
0%
Sep 30Bold Page Builder <= 5.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_service title
CVE-2026-6172
BP
Bold Page Builder
boldthemes
6.4
0%
Sep 30Bold Page Builder <= 5.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'caption' Parameter
CVE-2026-5920
BP
Bold Page Builder
boldthemes
6.4
0%
Sep 16Bold Page Builder <= 5.9.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'shortcode_content' Parameter
CVE-2026-62110
BP
Bold Page Builder
boldthemes
6.5
0%
Sep 11WordPress Bold Page Builder plugin <= 5.9.9 - Cross Site Scripting (XSS) vulnerability
CVE-2026-7438
BT
Bold Timeline Lite
boldthemes
6.4
0%
Sep 11Bold Timeline Lite <= 1.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
CVE-2026-2357
BP
Bold Page Builder
boldthemes
6.4
0%
Aug 16Bold Page Builder <= 5.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2026-27429
NI
Nifty
BoldThemes
9.8
1%
Jun 16WordPress Nifty theme <= 1.4.1 - PHP Object Injection vulnerability
CVE-2026-3694
BP
Bold Page Builder
boldthemes
6.4
0%
May 14Bold Page Builder <= 5.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_button Shortcode
CVE-2026-27369
CE
Celeste
BoldThemes
8.1
0%
Mar 5WordPress Celeste theme <= 1.3.6 - PHP Object Injection vulnerability
CVE-2025-68541
IP
Ippsum
BoldThemes
9.8
0%
Feb 20WordPress Ippsum theme <= 1.2.0 - PHP Object Injection vulnerability
CVE-2025-67997
TR
Travelicious
BoldThemes
9.8
0%
Feb 20WordPress Travelicious theme < 1.6.7 - PHP Object Injection vulnerability
CVE-2025-67996
NE
Nestin
BoldThemes
9.8
0%
Feb 20WordPress Nestin theme < 1.2.6 - PHP Object Injection vulnerability
CVE-2026-25451
BP
Bold Page Builder
boldthemes
6.5
0%
Feb 19WordPress Bold Page Builder plugin <= 5.6.9 - Cross Site Scripting (XSS) vulnerability
CVE-2025-12159
BP
Bold Page Builder
boldthemes
6.4
0%
Feb 7Bold Page Builder <= 5.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2025-13463
BP
Bold Page Builder
boldthemes
6.4
0%
Feb 7Bold Page Builder <= 5.5.3 - Authenticated (Author+) Stored DOM-based Cross-Site Scripting in Post Grid
CVE-2025-12803
BP
Bold Page Builder
boldthemes
6.4
0%
Feb 7Bold Builder <= 5.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_tabs Shortcode
CVE-2025-15267
BP
Bold Page Builder
boldthemes
6.4
0%
Feb 7Bold Page Builder <= 5.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_accordion_item Shortcode
CVE-2025-68513
BT
Bold Timeline Lite
boldthemes
6.5
0%
Dec 24WordPress Bold Timeline Lite plugin <= 1.2.7 - Cross Site Scripting (XSS) vulnerability
CVE-2025-64233
CO
Codiqa
BoldThemes
9.8
0%
Dec 18WordPress Codiqa theme < 1.2.8 - PHP Object Injection vulnerability
CVE-2025-54723
DE
DentiCare
BoldThemes
9.8
0%
Dec 18WordPress DentiCare Theme < 1.4.3 - PHP Object Injection Vulnerability
CVE-2025-14032
BT
Bold Timeline Lite
boldthemes
6.4
0%
Dec 12Bold Timeline Lite <= 1.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'title' Parameter in 'bold_timeline_group' Shortcode
CVE-2025-66057
BP
Bold Page Builder
boldthemes
6.5
0%
Nov 21WordPress Bold Page Builder plugin <= 5.5.2 - Cross Site Scripting (XSS) vulnerability
CVE-2025-7730
BP
Bold Page Builder
boldthemes
6.4
0%
Oct 23Bold Page Builder <= 5.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via `percentage` Parameter
CVE-2025-60216
AD
Addison
BoldThemes
9.8
1%
Oct 22WordPress Addison theme < 1.4.8 - PHP Object Injection vulnerability
CVE-2025-60214
GO
Goldenblatt
BoldThemes
9.8
1%
Oct 22WordPress Goldenblatt theme < 1.3.0 - PHP Object Injection vulnerability
CVE-2025-58194
BP
Bold Page Builder
boldthemes
6.5
0%
Aug 27WordPress Bold Page Builder Plugin <= 5.4.3 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-54006
BP
Bold Page Builder
boldthemes
6.5
0%
Jul 16WordPress Bold Page Builder plugin <= 5.4.1 - Cross Site Scripting (XSS) Vulnerability
CVE-2024-5647
BP
Bold Page Builder
boldthemes
6.4
0%
Jul 3Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Magnific Popups JavaScript Library
CVE-2025-52724
AM
Amwerk
BoldThemes
9.8
0%
Jun 27WordPress Amwerk theme <= 1.2.0 - PHP Object Injection Vulnerability
CVE-2025-5286
BP
Bold Page Builder
boldthemes
6.4
0%
May 29Bold Builder <= 5.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via additional_settings Parameter
CVE-2025-39495
AV
Avantage
BoldThemes
9.8
1%
May 23WordPress Avantage Theme <= 2.4.9 - PHP Object Injection vulnerability
CVE-2025-39499
ME
Medicare
BoldThemes
9.8
1%
May 23WordPress Medicare Theme <= 2.1.0 - PHP Object Injection vulnerability
CVE-2025-3715
BP
Bold Page Builder
boldthemes
6.4
0%
May 18Bold Page Builder <= 5.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-text' Parameter
CVE-2025-47525
BP
Bold Page Builder
boldthemes
5.9
0%
May 7WordPress Bold Page Builder plugin <= 5.3.0 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-47488
BP
Bold Page Builder
boldthemes
6.5
0%
May 7WordPress Bold Page Builder plugin <= 5.3.2 - Cross Site Scripting (XSS) Vulnerability
CVE-2023-45110
BT
Bold Timeline Lite
boldthemes
4.3
0%
Jan 2WordPress Bold Timeline Lite plugin <= 1.1.9 - Broken Access Control vulnerability
CVE-2024-54382
BP
Bold Page Builder
boldthemes
4.9
2%
Dec 16WordPress Bold Page Builder plugin <= 5.1.5 - Path Traversal vulnerability
CVE-2024-53801
BP
Bold Page Builder
boldthemes
5.4
0%
Dec 6WordPress Bold Page Builder plugin <= 5.2.1 - Cross Site Scripting (XSS) vulnerability
CVE-2024-50417
BP
Bold Page Builder
boldthemes
8.8
2%
Nov 19WordPress Bold Page Builder plugin <= 5.1.3 - Broken Access Control vulnerability
CVE-2024-52417
RE
ReConstruction
BoldThemes
7.1
0%
Nov 18WordPress ReConstruction theme <= 1.4.7 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-47298
BP
Bold Page Builder
boldthemes
5.4
0%
Oct 6WordPress Bold Page Builder plugin <= 5.1.1 - Cross Site Scripting (XSS) vulnerability
CVE-2024-47391
BP
Bold Page Builder
boldthemes
5.4
0%
Oct 5WordPress Bold Page Builder plugin < 5.1.1 - Cross Site Scripting (XSS) vulnerability
CVE-2024-43294
BT
Bold Timeline Lite
BoldThemes
6.5
0%
Aug 18WordPress Bold Timeline Lite plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability
CVE-2024-7100
BP
Bold Page Builder
boldthemes
5.4
0%
Jul 30Bold Page Builder <= 5.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_button Shortcode
CVE-2024-2736
BP
Bold Page Builder
boldthemes
5.4
1%
Apr 10Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via HTML Tags
CVE-2024-2735
BP
Bold Page Builder
boldthemes
5.4
1%
Apr 10Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via "Price List" Element
CVE-2024-2734
BP
Bold Page Builder
boldthemes
5.4
1%
Apr 10Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via AI Features
CVE-2024-2733
BP
Bold Page Builder
boldthemes
5.4
1%
Apr 10Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Separator Element
CVE-2024-3267
BP
Bold Page Builder
boldthemes
5.4
0%
Apr 9Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_price_list Shortcode
CVE-2024-3266
BP
Bold Page Builder
boldthemes
5.4
0%
Apr 9Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widget URL Attribute
CVE-2024-30442
BP
Bold Page Builder
BoldThemes
5.4
0%
Mar 29WordPress Bold Page Builder plugin <= 4.8.0 - Cross Site Scripting (XSS) vulnerability
CVE-2024-30179
BP
Bold Page Builder
BoldThemes
5.4
0%
Mar 27WordPress Bold Page Builder plugin <= 4.7.6 - Cross Site Scripting (XSS) vulnerability
CVE-2024-1159
BP
Bold Page Builder
boldthemes
5.4
0%
Feb 13Bold Page Builder <= 4.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Raw Content
CVE-2024-1157
BP
Bold Page Builder
boldthemes
5.4
0%
Feb 13Bold Page Builder <= 4.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button URL
CVE-2024-1160
BP
Bold Page Builder
boldthemes
5.4
0%
Feb 13Bold Page Builder <= 4.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Icon Link
CVE-2023-49823
BP
Bold Page Builder
BoldThemes
5.4
0%
Dec 15WordPress Bold Page Builder Plugin <= 4.6.1 is vulnerable to Cross Site Scripting (XSS)