Product by BoldThemes
Bold Page Builder
41 known vulnerabilities in Bold Page Builder (BoldThemes), 0 of them actively exploited (CISA KEV).
Key figures
41
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Medium | CVE-2024-54382 | WordPress Bold Page Builder plugin <= 5.1.5 - Path Traversal vulnerability | 4.9 | |
| High | CVE-2024-50417 | WordPress Bold Page Builder plugin <= 5.1.3 - Broken Access Control vulnerability | 4.3 | |
| Medium | CVE-2026-5920 | BoldThemes Bold Page Builder: Cross-site Scripting | 6.4 | |
| Medium | CVE-2026-6171 | BoldThemes Bold Page Builder: Cross-site Scripting | 6.4 | |
| Medium | CVE-2026-88037 | BoldThemes Bold Page Builder: Cross-site Scripting | 6.4 | |
| Medium | CVE-2026-6173 | BoldThemes Bold Page Builder: Cross-site Scripting | 6.4 | |
| Medium | CVE-2026-6170 | BoldThemes Bold Page Builder: Cross-site Scripting | 6.4 | |
| Medium | CVE-2026-6172 | BoldThemes Bold Page Builder: Cross-site Scripting | 6.4 | |
| Medium | CVE-2026-2357 | Bold Page Builder <= 5.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting | 6.4 | |
| Medium | CVE-2026-62110 | WordPress Bold Page Builder plugin <= 5.9.9 - Cross Site Scripting (XSS) vulnerability | 6.5 | |
| Medium | CVE-2024-2736 | Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via HTML Tags | 6.4 | |
| Medium | CVE-2024-2735 | BoldThemes Bold Page Builder: Cross-site Scripting | 6.4 | |
| Medium | CVE-2024-2734 | BoldThemes Bold Page Builder: Cross-site Scripting | 6.4 | |
| Medium | CVE-2025-5286 | BoldThemes Bold Page Builder: Cross-site Scripting | 6.4 | |
| Medium | CVE-2023-49823 | WordPress Bold Page Builder Plugin <= 4.6.1 is vulnerable to Cross Site Scripting (XSS) | 6.5 | |
| Medium | CVE-2026-3694 | BoldThemes Bold Page Builder: Cross-site Scripting | 6.4 | |
| Medium | CVE-2024-7100 | BoldThemes Bold Page Builder: Cross-site Scripting | 6.4 | |
| Medium | CVE-2025-13463 | BoldThemes Bold Page Builder: Cross-site Scripting | 6.4 | |
| Medium | CVE-2025-12803 | BoldThemes Bold Page Builder: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) | 6.4 | |
| Medium | CVE-2025-15267 | BoldThemes Bold Page Builder: Cross-site Scripting | 6.4 | |
| Medium | CVE-2024-53801 | WordPress Bold Page Builder plugin <= 5.2.1 - Cross Site Scripting (XSS) vulnerability | 6.5 | |
| Medium | CVE-2024-5647 | BlossomThemes Social Feed: Cross-site Scripting | 6.4 | |
| Medium | CVE-2024-30179 | WordPress Bold Page Builder plugin <= 4.7.6 - Cross Site Scripting (XSS) vulnerability | 6.5 | |
| Medium | CVE-2024-3266 | BoldThemes Bold Page Builder: Cross-site Scripting | 6.4 | |
| Medium | CVE-2025-12159 | Bold Page Builder <= 5.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode | 6.4 |