Vendor

    BoldThemes

    63 known vulnerabilities in products by BoldThemes, 0 of them actively exploited (CISA KEV).

    Key figures

    63

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    13

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in BoldThemes
    CriticalCVE-2021-24321

    Bello < 1.6.0 - Unauthenticated Blind SQL Injection

    also in 1 other product

    		9.8
    MediumCVE-2021-24320

    Bello < 1.6.0 - Unauthenticated Reflected XSS & XFS

    also in 1 other product

    		6.1
    CriticalCVE-2026-62077

    WordPress Avala theme <= 1.1.4 - PHP Object Injection vulnerability

    		9.8
    MediumCVE-2024-54382

    WordPress Bold Page Builder plugin <= 5.1.5 - Path Traversal vulnerability

    also in 1 other product

    		4.9
    CriticalCVE-2026-27429

    WordPress Nifty theme <= 1.4.1 - PHP Object Injection vulnerability

    		9.8
    HighCVE-2024-50417

    WordPress Bold Page Builder plugin <= 5.1.3 - Broken Access Control vulnerability

    also in 1 other product

    		4.3
    CriticalCVE-2025-60216

    WordPress Addison theme < 1.4.8 - PHP Object Injection vulnerability

    		9.8
    CriticalCVE-2025-39495

    WordPress Avantage Theme <= 2.4.9 - PHP Object Injection vulnerability

    		9.8
    CriticalCVE-2025-39499

    WordPress Medicare Theme <= 2.1.0 - PHP Object Injection vulnerability

    		9.8
    CriticalCVE-2025-60214

    WordPress Goldenblatt theme < 1.3.0 - PHP Object Injection vulnerability

    		9.8
    CriticalCVE-2025-67997

    WordPress Travelicious theme < 1.6.7 - PHP Object Injection vulnerability

    		9.8
    CriticalCVE-2025-67996

    WordPress Nestin theme < 1.2.6 - PHP Object Injection vulnerability

    		9.8
    CriticalCVE-2025-68541

    WordPress Ippsum theme <= 1.2.0 - PHP Object Injection vulnerability

    		9.8
    MediumCVE-2021-24319

    Bello < 1.6.0 - Authenticated Cross-Site Scripting (XSS) and XFS

    also in 1 other product

    		5.4
    CriticalCVE-2025-54723

    WordPress DentiCare Theme < 1.4.3 - PHP Object Injection Vulnerability

    		9.8
    CriticalCVE-2025-52724

    WordPress Amwerk theme <= 1.2.0 - PHP Object Injection Vulnerability

    		9.8
    CriticalCVE-2025-64233

    WordPress Codiqa theme < 1.2.8 - PHP Object Injection vulnerability

    		9.8
    MediumCVE-2026-7438

    BoldThemes Bold Timeline Lite: Cross-site Scripting

    		6.4
    MediumCVE-2026-5920

    BoldThemes Bold Page Builder: Cross-site Scripting

    		6.4
    HighCVE-2026-27369

    WordPress Celeste theme <= 1.3.6 - PHP Object Injection vulnerability

    		8.1
    MediumCVE-2026-6173

    BoldThemes Bold Page Builder: Cross-site Scripting

    		6.4
    MediumCVE-2026-6171

    BoldThemes Bold Page Builder: Cross-site Scripting

    		6.4
    MediumCVE-2026-88037

    BoldThemes Bold Page Builder: Cross-site Scripting

    		6.4
    MediumCVE-2026-6170

    BoldThemes Bold Page Builder: Cross-site Scripting

    		6.4
    MediumCVE-2026-6172

    BoldThemes Bold Page Builder: Cross-site Scripting

    		6.4

    All vulnerabilities in search

    Products

    Products by BoldThemes
    Bold Page Builder410
    Bold Timeline Lite50
    Bello - Directory & Listing30