Vendor

    BoldThemes

    26 known vulnerabilities in products by BoldThemes, 0 of them actively exploited (CISA KEV).

    Key figures

    26

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in BoldThemes
    CriticalCVE-2021-24321

    Bello < 1.6.0 - Unauthenticated Blind SQL Injection

    also in 1 other product

    		9.8
    HighCVE-2021-24579

    Bold Page Builder < 3.1.6 - PHP Object Injection

    		8.8
    HighCVE-2019-15821

    BOLDThemes Bold Page Builder: security vulnerability

    		7.5
    MediumCVE-2021-24320

    Bello < 1.6.0 - Unauthenticated Reflected XSS & XFS

    also in 1 other product

    		6.1
    MediumCVE-2021-24820

    Cost Calculator <= 1.6 - Authenticated Local File Inclusion

    		6.5
    MediumCVE-2024-54382

    WordPress Bold Page Builder plugin <= 5.1.5 - Path Traversal vulnerability

    also in 1 other product

    		4.9
    HighCVE-2024-50417

    WordPress Bold Page Builder plugin <= 5.1.3 - Broken Access Control vulnerability

    also in 1 other product

    		4.3
    MediumCVE-2021-24319

    Bello < 1.6.0 - Authenticated Cross-Site Scripting (XSS) and XFS

    also in 1 other product

    		5.4
    MediumCVE-2022-4828

    Bold Timeline Lite < 1.1.5 - Contributor+ Stored XSS via Shortcode

    		5.4
    MediumCVE-2022-2089

    Bold Page Builder < 4.3.3 - Admin+ Stored Cross-Site Scripting

    		4.8
    MediumCVE-2024-2736

    Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via HTML Tags

    also in 1 other product

    		6.4
    MediumCVE-2024-2735

    BoldThemes Bold Page Builder: Cross-site Scripting

    also in 1 other product

    		6.4
    MediumCVE-2024-2734

    BoldThemes Bold Page Builder: Cross-site Scripting

    also in 1 other product

    		6.4
    MediumCVE-2023-49823

    WordPress Bold Page Builder Plugin <= 4.6.1 is vulnerable to Cross Site Scripting (XSS)

    also in 1 other product

    		6.5
    MediumCVE-2024-7100

    BoldThemes Bold Page Builder: Cross-site Scripting

    also in 1 other product

    		6.4
    MediumCVE-2024-53801

    WordPress Bold Page Builder plugin <= 5.2.1 - Cross Site Scripting (XSS) vulnerability

    also in 1 other product

    		6.5
    MediumCVE-2024-30179

    WordPress Bold Page Builder plugin <= 4.7.6 - Cross Site Scripting (XSS) vulnerability

    also in 1 other product

    		6.5
    MediumCVE-2024-3266

    BoldThemes Bold Page Builder: Cross-site Scripting

    also in 1 other product

    		6.4
    MediumCVE-2024-2733

    BoldThemes Bold Page Builder: Cross-site Scripting

    also in 1 other product

    		5.4
    MediumCVE-2024-3267

    BoldThemes Bold Page Builder: Cross-site Scripting

    also in 1 other product

    		6.4
    MediumCVE-2024-1159

    BoldThemes Bold Page Builder: Cross-site Scripting

    also in 1 other product

    		6.4
    MediumCVE-2024-47298

    WordPress Bold Page Builder plugin <= 5.1.1 - Cross Site Scripting (XSS) vulnerability

    also in 1 other product

    		6.5
    MediumCVE-2024-47391

    WordPress Bold Page Builder plugin < 5.1.1 - Cross Site Scripting (XSS) vulnerability

    also in 1 other product

    		6.5
    MediumCVE-2024-30442

    WordPress Bold Page Builder plugin <= 4.8.0 - Cross Site Scripting (XSS) vulnerability

    also in 1 other product

    		6.5
    MediumCVE-2024-1157

    Bold Page Builder <= 4.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button URL

    also in 1 other product

    		5.4

    All vulnerabilities in search

    Products

    Products by BoldThemes
    Bold Page Builder210
    BoldThemes Bello - Directory & Listing30