BT
Product
Bold Timeline Lite
4
CVEs
0
On KEV
6.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 4Low 0
Watch
Add Bold Timeline Lite to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-68513 | 6.5 | Dec 24 | WordPress Bold Timeline Lite plugin <= 1.2.7 - Cross Site Scripting (XSS) vulnerability Affected: through 1.2.7 |
| CVE-2026-7438 | 6.4 | Sep 11 | Bold Timeline Lite <= 1.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes Affected: through 1.2.8 |
| CVE-2025-14032 | 6.4 | Dec 12 | Bold Timeline Lite <= 1.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'title' Parameter in 'bold_timeline_group' Shortcode Affected: through 1.2.7 |
| CVE-2023-45110 | 4.3 | Jan 2 | WordPress Bold Timeline Lite plugin <= 1.1.9 - Broken Access Control vulnerability Affected: through 1.1.9 |
Showing 4