Threat database

52 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
Medium	6.4	EPSS 0.3%	CVE-2025-15267Bold Page Builder · Cross-site Scripting Medium6.4EPSS 0.3%2026-02-07CVE Database V5CVE-2025-15267 The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's bt_bb_accordion_item shortcode in all versions up to, and including, 5.6.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. EPSS 0.3%Vulnerability boldthemes #cwe-79	CVE Database V5	2026-02-07
Medium	6.5	EPSS 0.2%	CVE-2025-68513Bold Timeline Lite · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in boldthemes… Medium6.5EPSS 0.2%2025-12-24CVE Database V5CVE-2025-68513 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in boldthemes Bold Timeline Lite bold-timeline-lite allows Stored XSS.This issue affects Bold Timeline Lite: from n/a through <= 1.2.7. EPSS 0.2%Vulnerability boldthemes	CVE Database V5	2025-12-24
Critical	9.8	EPSS 0.4%	CVE-2025-64233Codiqa · Deserialization of Untrusted Data Critical9.8EPSS 0.4%2025-12-18CVE Database V5CVE-2025-64233 Deserialization of Untrusted Data vulnerability in BoldThemes Codiqa codiqa allows Object Injection.This issue affects Codiqa: from n/a through < 1.2.8. EPSS 0.4%Vulnerability BoldThemes #cwe-502	CVE Database V5	2025-12-18
Critical	9.8	EPSS 0.5%	CVE-2025-54723DentiCare · Deserialization of Untrusted Data Critical9.8EPSS 0.5%2025-12-18CVE Database V5CVE-2025-54723 Deserialization of Untrusted Data vulnerability in BoldThemes DentiCare denticare allows Object Injection.This issue affects DentiCare: from n/a through < 1.4.3. EPSS 0.5%Vulnerability BoldThemes	CVE Database V5	2025-12-18
Medium	6.4	EPSS 0.3%	CVE-2025-14032Bold Timeline Lite · Cross-site Scripting Medium6.4EPSS 0.3%2025-12-12CVE Database V5CVE-2025-14032 The Bold Timeline Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'title' parameter in the 'bold_timeline_group' shortcode in all versions up to, and including, 1.2.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. EPSS 0.3%Vulnerability boldthemes #cwe-79	CVE Database V5	2025-12-12
Medium	6.5	EPSS 0.2%	CVE-2025-66057Bold Page Builder · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in boldthemes… Medium6.5EPSS 0.2%2025-11-21CVE Database V5CVE-2025-66057 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in boldthemes Bold Page Builder bold-page-builder allows DOM-Based XSS.This issue affects Bold Page Builder: from n/a through <= 5.5.2. EPSS 0.2%Vulnerability boldthemes #cwe-79	CVE Database V5	2025-11-21
Medium	6.4	EPSS 0.2%	CVE-2025-7730Bold Page Builder · Cross-site Scripting Medium6.4EPSS 0.2%2025-10-23CVE Database V5CVE-2025-7730 The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘percentage’ parameter in all versions up to, and including, 5.4.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. EPSS 0.2%Vulnerability boldthemes #cwe-79	CVE Database V5	2025-10-23
Critical	9.8	EPSS 0.6%	CVE-2025-60216Addison · Deserialization of Untrusted Data Critical9.8EPSS 0.6%2025-10-22CVE Database V5CVE-2025-60216 Deserialization of Untrusted Data vulnerability in BoldThemes Addison addison allows Object Injection.This issue affects Addison: from n/a through < 1.4.8. EPSS 0.6%Vulnerability BoldThemes	CVE Database V5	2025-10-22
Critical	9.8	EPSS 0.6%	CVE-2025-60214Goldenblatt · Deserialization of Untrusted Data Critical9.8EPSS 0.6%2025-10-22CVE Database V5CVE-2025-60214 Deserialization of Untrusted Data vulnerability in BoldThemes Goldenblatt goldenblatt allows Object Injection.This issue affects Goldenblatt: from n/a through < 1.3.0. EPSS 0.6%Vulnerability BoldThemes	CVE Database V5	2025-10-22
Medium	6.5	EPSS 0.2%	CVE-2025-58194Bold Page Builder · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in boldthemes… Medium6.5EPSS 0.2%2025-08-27CVE Database V5CVE-2025-58194 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in boldthemes Bold Page Builder bold-page-builder allows Stored XSS.This issue affects Bold Page Builder: from n/a through <= 5.4.3. EPSS 0.2%Vulnerability boldthemes	CVE Database V5	2025-08-27
Medium	6.5	EPSS 0.2%	CVE-2025-54006Bold Page Builder · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in boldthemes… Medium6.5EPSS 0.2%2025-07-16CVE Database V5CVE-2025-54006 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in boldthemes Bold Page Builder bold-page-builder allows Stored XSS.This issue affects Bold Page Builder: from n/a through <= 5.4.1. EPSS 0.2%Vulnerability boldthemes	CVE Database V5	2025-07-16
Critical	9.8	EPSS 0.4%	CVE-2025-52724Amwerk · Deserialization of Untrusted Data Critical9.8EPSS 0.4%2025-06-27CVE Database V5CVE-2025-52724 Deserialization of Untrusted Data vulnerability in BoldThemes Amwerk amwerk allows Object Injection.This issue affects Amwerk: from n/a through <= 1.2.0. EPSS 0.4%Vulnerability BoldThemes	CVE Database V5	2025-06-27
Medium	6.4	EPSS 0.4%	CVE-2025-5286Bold Page Builder · Cross-site Scripting Medium6.4EPSS 0.4%2025-05-29CVE Database V5CVE-2025-5286 The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘additional_settings’ parameter in all versions up to, and including, 5.3.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. EPSS 0.4%Vulnerability boldthemes #cwe-79	CVE Database V5	2025-05-29
Medium	4.9	EPSS 2.2%	CVE-2024-54382Bold Page Builder · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in boldthemes Bold Page… Medium4.9EPSS 2.2%2024-12-16CVE Database V5CVE-2024-54382 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in boldthemes Bold Page Builder bold-page-builder allows Path Traversal.This issue affects Bold Page Builder: from n/a through <= 5.1.5. EPSS 2.2%Vulnerability boldthemes	CVE Database V5	2024-12-16
Medium	6.5	EPSS 0.4%	CVE-2024-53801Bold Page Builder · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in boldthemes… Medium6.5EPSS 0.4%2024-12-06CVE Database V5CVE-2024-53801 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in boldthemes Bold Page Builder bold-page-builder allows Stored XSS.This issue affects Bold Page Builder: from n/a through <= 5.2.1. EPSS 0.4%Vulnerability boldthemes	CVE Database V5	2024-12-06
Medium	4.3	EPSS 1.9%	CVE-2024-50417Bold Page Builder · Missing Authorization Medium4.3EPSS 1.9%2024-11-19CVE Database V5CVE-2024-50417 Missing Authorization vulnerability in boldthemes Bold Page Builder bold-page-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bold Page Builder: from n/a through <= 5.1.3. EPSS 1.9%Vulnerability boldthemes	CVE Database V5	2024-11-19
High	7.1	EPSS 0.3%	CVE-2024-52417ReConstruction · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in BoldThemes… High7.1EPSS 0.3%2024-11-18CVE Database V5CVE-2024-52417 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BoldThemes ReConstruction reconstruction allows Reflected XSS.This issue affects ReConstruction: from n/a through <= 1.4.7. EPSS 0.3%Vulnerability BoldThemes	CVE Database V5	2024-11-18
Medium	6.5	EPSS 0.3%	CVE-2024-47298Bold Page Builder · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in boldthemes… Medium6.5EPSS 0.3%2024-10-06CVE Database V5CVE-2024-47298 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in boldthemes Bold Page Builder bold-page-builder allows Stored XSS.This issue affects Bold Page Builder: from n/a through <= 5.1.1. EPSS 0.3%Vulnerability boldthemes	CVE Database V5	2024-10-06
Medium	6.5	EPSS 0.3%	CVE-2024-47391Bold Page Builder · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in boldthemes… Medium6.5EPSS 0.3%2024-10-05CVE Database V5CVE-2024-47391 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in boldthemes Bold Page Builder bold-page-builder allows Stored XSS.This issue affects Bold Page Builder: from n/a through < 5.1.1. EPSS 0.3%Vulnerability boldthemes	CVE Database V5	2024-10-05
Medium	6.5	EPSS 0.3%	CVE-2024-43294Bold Timeline Lite · Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') Medium6.5EPSS 0.3%2024-08-18CVE Database V5CVE-2024-43294 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in BoldThemes Bold Timeline Lite allows Stored XSS.This issue affects Bold Timeline Lite: from n/a through 1.2.0. EPSS 0.3%Vulnerability BoldThemes #cwe-79	CVE Database V5	2024-08-18

Showing 21–40 of 52 results