Skip to content
OpenAdvisories

Product · Bold Themes

Bold Page Builder

43 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

43 results · Clear filters · Feed

  • Medium 5.4
    CVE-2024-1160

    Bold Page Builder <= 4.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Icon Link

    The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Icon Link in all versions up to, and including, 4.8.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated…

    Bold Themes Bold Page Builder Web / CMS
  • Medium 5.4
    CVE-2024-1157

    Bold Page Builder <= 4.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button URL

    The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's button URL in all versions up to, and including, 4.8.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticate…

    Bold Themes Bold Page Builder Web / CMS
  • Medium 6.5
    CVE-2023-49823

    WordPress Bold Page Builder Plugin <= 4.6.1 is vulnerable to Cross Site Scripting (XSS)

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BoldThemes Bold Page Builder allows Stored XSS.This issue affects Bold Page Builder: from n/a through 4.6.1.

    Bold Themes Bold Page Builder