Skip to content
OpenAdvisories

Vendor

Bold Themes

65 known vulnerabilities.

Products

Bold Page Builder 43 Bold Timeline Lite 5 Bello - Directory & Listing 3 Avantage 1 Amwerk 1 Nifty 1 Codiqa 1 Medicare 1 Celeste 1 DentiCare 1 Travelicious 1 Addison 1 ReConstruction 1 Goldenblatt 1 Nestin 1 Ippsum 1 Avala 1
All Critical High Medium Low Exploited only Public exploit

12 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-62077

    WordPress Avala theme <= 1.1.4 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in Avala <= 1.1.4 versions.

    Bold Themes Avala
  • Critical 9.8
    CVE-2026-27429

    WordPress Nifty theme <= 1.4.1 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in Nifty <= 1.4.1 versions.

    Bold Themes Nifty
  • Critical 9.8
    CVE-2025-68541

    WordPress Ippsum theme <= 1.2.0 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in BoldThemes Ippsum ippsum allows Object Injection.This issue affects Ippsum: from n/a through <= 1.2.0.

    Bold Themes Ippsum
  • Critical 9.8
    CVE-2025-67996

    WordPress Nestin theme < 1.2.6 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in BoldThemes Nestin nestin allows Object Injection.This issue affects Nestin: from n/a through < 1.2.6.

    Bold Themes Nestin
  • Critical 9.8
    CVE-2025-67997

    WordPress Travelicious theme < 1.6.7 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in BoldThemes Travelicious travelicious allows Object Injection.This issue affects Travelicious: from n/a through < 1.6.7.

    Bold Themes Travelicious
  • Critical 9.8
    CVE-2025-64233

    WordPress Codiqa theme < 1.2.8 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in BoldThemes Codiqa codiqa allows Object Injection.This issue affects Codiqa: from n/a through < 1.2.8.

    Bold Themes Codiqa
  • Critical 9.8
    CVE-2025-54723

    WordPress DentiCare Theme < 1.4.3 - PHP Object Injection Vulnerability

    Deserialization of Untrusted Data vulnerability in BoldThemes DentiCare denticare allows Object Injection.This issue affects DentiCare: from n/a through < 1.4.3.

    Bold Themes DentiCare
  • Critical 9.8
    CVE-2025-60214

    WordPress Goldenblatt theme < 1.3.0 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in BoldThemes Goldenblatt goldenblatt allows Object Injection.This issue affects Goldenblatt: from n/a through < 1.3.0.

    Bold Themes Goldenblatt
  • Critical 9.8
    CVE-2025-60216

    WordPress Addison theme < 1.4.8 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in BoldThemes Addison addison allows Object Injection.This issue affects Addison: from n/a through < 1.4.8.

    Bold Themes Addison
  • Critical 9.8
    CVE-2025-52724

    WordPress Amwerk theme <= 1.2.0 - PHP Object Injection Vulnerability

    Deserialization of Untrusted Data vulnerability in BoldThemes Amwerk amwerk allows Object Injection.This issue affects Amwerk: from n/a through <= 1.2.0.

    Bold Themes Amwerk
  • Critical 9.8
    CVE-2025-39499

    WordPress Medicare Theme <= 2.1.0 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in BoldThemes Medicare medicare allows Object Injection.This issue affects Medicare: from n/a through <= 2.1.0.

    Bold Themes Medicare
  • Critical 9.8
    CVE-2025-39495

    WordPress Avantage Theme <= 2.4.9 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in BoldThemes Avantage avantage allows Object Injection.This issue affects Avantage: from n/a through <= 2.4.9.

    Bold Themes Avantage