BP
Product
Bold Page Builder
23
CVEs
0
On KEV
6.5
Max CVSS
5
New 30D
Severity mix
Critical 0High 0Medium 23Low 0
Watch
Add Bold Page Builder to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-62110 | 6.5 | Sep 11 | WordPress Bold Page Builder plugin <= 5.9.9 - Cross Site Scripting (XSS) vulnerability Affected: through 5.9.9 |
| CVE-2026-25451 | 6.5 | Feb 19 | WordPress Bold Page Builder plugin <= 5.6.9 - Cross Site Scripting (XSS) vulnerability Affected: through 5.6.9 |
| CVE-2025-66057 | 6.5 | Nov 21 | WordPress Bold Page Builder plugin <= 5.5.2 - Cross Site Scripting (XSS) vulnerability Affected: through 5.5.2 |
| CVE-2025-58194 | 6.5 | Aug 27 | WordPress Bold Page Builder Plugin <= 5.4.3 - Cross Site Scripting (XSS) Vulnerability Affected: through 5.4.3 |
| CVE-2025-54006 | 6.5 | Jul 16 | WordPress Bold Page Builder plugin <= 5.4.1 - Cross Site Scripting (XSS) Vulnerability Affected: through 5.4.1 |
| CVE-2025-47488 | 6.5 | May 7 | WordPress Bold Page Builder plugin <= 5.3.2 - Cross Site Scripting (XSS) Vulnerability Affected: through 5.3.2 |
| CVE-2026-6173 | 6.4 | Sep 30 | Bold Page Builder <= 5.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'background_image' Parameter Affected: through 5.7.2 |
| CVE-2026-6170 | 6.4 | Sep 30 | Bold Page Builder <= 5.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_css_image_grid 'images' Shortcode Attribute Affected: through 5.7.2 |
| CVE-2026-6171 | 6.4 | Sep 30 | Bold Page Builder <= 5.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'target' Shortcode Attribute Affected: through 5.7.2 |
| CVE-2026-88037 | 6.4 | Sep 30 | Bold Page Builder <= 5.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_service title Affected: through 5.7.2 |
| CVE-2026-6172 | 6.4 | Sep 30 | Bold Page Builder <= 5.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'caption' Parameter Affected: through 5.7.2 |
| CVE-2026-5920 | 6.4 | Sep 16 | Bold Page Builder <= 5.9.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'shortcode_content' Parameter Affected: through 5.9.6 |
| CVE-2026-2357 | 6.4 | Aug 16 | Bold Page Builder <= 5.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: through 5.6.8 |
| CVE-2026-3694 | 6.4 | May 14 | Bold Page Builder <= 5.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_button Shortcode Affected: through 5.6.8 |
| CVE-2025-12159 | 6.4 | Feb 7 | Bold Page Builder <= 5.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Affected: through 5.4.8 |
| CVE-2025-13463 | 6.4 | Feb 7 | Bold Page Builder <= 5.5.3 - Authenticated (Author+) Stored DOM-based Cross-Site Scripting in Post Grid Affected: through 5.5.3 |
| CVE-2025-12803 | 6.4 | Feb 7 | Bold Builder <= 5.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_tabs Shortcode Affected: through 5.5.1 |
| CVE-2025-15267 | 6.4 | Feb 7 | Bold Page Builder <= 5.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_accordion_item Shortcode Affected: through 5.6.1 |
| CVE-2025-7730 | 6.4 | Oct 23 | Bold Page Builder <= 5.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via `percentage` Parameter Affected: through 5.4.5 |
| CVE-2024-5647 | 6.4 | Jul 3 | Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Magnific Popups JavaScript Library Affected: through 5.1.2 |
| CVE-2025-5286 | 6.4 | May 29 | Bold Builder <= 5.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via additional_settings Parameter Affected: through 5.3.6 |
| CVE-2025-3715 | 6.4 | May 18 | Bold Page Builder <= 5.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-text' Parameter Affected: through 5.3.5 |
| CVE-2025-47525 | 5.9 | May 7 | WordPress Bold Page Builder plugin <= 5.3.0 - Cross Site Scripting (XSS) Vulnerability Affected: through 5.3.0 |
Showing 23