VendorsBOLDThemesbold_page_builderall versions
Vulnerabilities

BOLDThemes Bold Page Builder

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

21CVEs
CVE-2021-24579
Bold Page Builder < 3.1.6 - PHP Object Injection
Published 2021-08-30 · Modified
8.8EPSS 0.082
CVE-2024-50417
WordPress Bold Page Builder plugin <= 5.1.3 - Broken Access Control vulnerability
Published 2024-11-19 · Modified
8.8EPSS 0.019
CVE-2019-15821
The bold-page-builder plugin before 2.3.2 for WordPress has no protection against modifying settings and importing data.
Published 2019-08-30 · Modified
7.5EPSS 0.110
CVE-2023-49823
WordPress Bold Page Builder Plugin <= 4.6.1 is vulnerable to Cross Site Scripting (XSS)
Published 2023-12-15 · Modified
6.5EPSS 0.005
CVE-2024-30179
WordPress Bold Page Builder plugin <= 4.7.6 - Cross Site Scripting (XSS) vulnerability
Published 2024-03-27 · Modified
6.5EPSS 0.004
CVE-2024-53801
WordPress Bold Page Builder plugin <= 5.2.1 - Cross Site Scripting (XSS) vulnerability
Published 2024-12-06 · Modified
6.5EPSS 0.004
CVE-2024-47298
WordPress Bold Page Builder plugin <= 5.1.1 - Cross Site Scripting (XSS) vulnerability
Published 2024-10-06 · Modified
6.5EPSS 0.003
CVE-2024-30442
WordPress Bold Page Builder plugin <= 4.8.0 - Cross Site Scripting (XSS) vulnerability
Published 2024-03-29 · Modified
6.5EPSS 0.003
CVE-2024-47391
WordPress Bold Page Builder plugin < 5.1.1 - Cross Site Scripting (XSS) vulnerability
Published 2024-10-05 · Modified
6.5EPSS 0.003
CVE-2024-2734
Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via AI Features
Published 2024-04-10 · Modified
6.4EPSS 0.005
CVE-2024-2736
Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via HTML Tags
Published 2024-04-10 · Modified
6.4EPSS 0.005
CVE-2024-2735
Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via "Price List" Element
Published 2024-04-10 · Modified
6.4EPSS 0.005
CVE-2024-7100
Bold Page Builder <= 5.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_button Shortcode
Published 2024-07-30 · Analyzed
6.4EPSS 0.004
CVE-2024-3266
Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widget URL Attribute
Published 2024-04-09 · Modified
6.4EPSS 0.004
CVE-2024-3267
Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_price_list Shortcode
Published 2024-04-09 · Modified
6.4EPSS 0.004
CVE-2024-1159
Bold Page Builder <= 4.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Raw Content
Published 2024-02-13 · Modified
6.4EPSS 0.004
CVE-2024-2733
Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Separator Element
Published 2024-04-10 · Modified
5.4EPSS 0.005
CVE-2024-1157
Bold Page Builder <= 4.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button URL
Published 2024-02-13 · Modified
5.4EPSS 0.004
CVE-2024-1160
Bold Page Builder <= 4.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Icon Link
Published 2024-02-13 · Modified
5.4EPSS 0.004
CVE-2024-54382
WordPress Bold Page Builder plugin <= 5.1.5 - Path Traversal vulnerability
Published 2024-12-16 · Modified
4.9EPSS 0.022
CVE-2022-2089
Bold Page Builder < 4.3.3 - Admin+ Stored Cross-Site Scripting
Published 2022-07-11 · Modified
4.8EPSS 0.011