Skip to content
Noroxi

bold-themes records

26 published records for vendor bold-themes.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
30.8%
Median publish → KEV
No record has entered KEV

Records by year

  1. 19
  2. 21
  3. 22
  4. 23
  5. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

26 records
  • CVE-2021-24321
    59Plan

    Bello < 1.6.0 - Unauthenticated Blind SQL Injection

    CriticalCVSS 9.8No exploitEPSS 66%

    bold-themes · belloJun 1, 2021

  • CVE-2021-24579
    37Monitor

    Bold Page Builder < 3.1.6 - PHP Object Injection

    HighCVSS 8.8No exploitEPSS 8%

    bold-themes · bold page builderAug 30, 2021

  • CVE-2024-50417
    36Monitor

    WordPress Bold Page Builder plugin <= 5.1.3 - Broken Access Control vulnerability

    HighCVSS 8.8No exploitEPSS 1%

    bold-themes · bold page builderNov 19, 2024

  • CVE-2019-15821
    33Monitor

    The bold-page-builder plugin before 2.3.2 for WordPress has no protection against modifying settings and importing data.

    HighCVSS 7.5No exploitEPSS 11%

    bold-themes · bold page builderAug 30, 2019

  • CVE-2021-24320
    27Monitor

    Bello < 1.6.0 - Unauthenticated Reflected XSS & XFS

    MediumCVSS 6.1Proof of conceptEPSS 10%

    bold-themes · belloJun 1, 2021

  • CVE-2021-24820
    27Monitor

    Cost Calculator <= 1.6 - Authenticated Local File Inclusion

    MediumCVSS 6.5No exploitEPSS 3%

    bold-themes · cost calculatorFeb 28, 2022

  • CVE-2021-24319
    22Monitor

    Bello < 1.6.0 - Authenticated Cross-Site Scripting (XSS) and XFS

    MediumCVSS 5.4No exploitEPSS 1%

    bold-themes · belloJun 1, 2021

  • CVE-2022-4828
    21Monitor

    Bold Timeline Lite < 1.1.5 - Contributor+ Stored XSS via Shortcode

    MediumCVSS 5.4No exploitEPSS 1%

    bold-themes · bold timeline liteJan 30, 2023

  • CVE-2024-2734
    21Monitor

    Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via AI Features

    MediumCVSS 5.4No exploitEPSS 0%

    bold-themes · bold page builderApr 10, 2024

  • CVE-2024-2733
    21Monitor

    Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Separator Element

    MediumCVSS 5.4No exploitEPSS 0%

    bold-themes · bold page builderApr 10, 2024

  • CVE-2024-2735
    21Monitor

    Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via "Price List" Element

    MediumCVSS 5.4No exploitEPSS 0%

    bold-themes · bold page builderApr 10, 2024

  • CVE-2024-2736
    21Monitor

    Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via HTML Tags

    MediumCVSS 5.4No exploitEPSS 0%

    bold-themes · bold page builderApr 10, 2024

  • CVE-2023-49823
    21Monitor

    WordPress Bold Page Builder Plugin <= 4.6.1 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 5.4No exploitEPSS 0%

    bold-themes · bold page builderDec 15, 2023

  • CVE-2024-7100
    21Monitor

    Bold Page Builder <= 5.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_button Shortcode

    MediumCVSS 5.4No exploitEPSS 0%

    bold-themes · bold page builderJul 30, 2024

  • CVE-2024-3266
    21Monitor

    Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widget URL Attribute

    MediumCVSS 5.4No exploitEPSS 0%

    bold-themes · bold page builderApr 9, 2024

  • CVE-2024-30179
    21Monitor

    WordPress Bold Page Builder plugin <= 4.7.6 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    bold-themes · bold page builderMar 27, 2024

  • CVE-2024-3267
    21Monitor

    Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_price_list Shortcode

    MediumCVSS 5.4No exploitEPSS 0%

    bold-themes · bold page builderApr 9, 2024

  • CVE-2024-53801
    21Monitor

    WordPress Bold Page Builder plugin <= 5.2.1 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    bold-themes · bold page builderDec 6, 2024

  • CVE-2024-1157
    21Monitor

    Bold Page Builder <= 4.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button URL

    MediumCVSS 5.4No exploitEPSS 0%

    bold-themes · bold page builderFeb 13, 2024

  • CVE-2024-1160
    21Monitor

    Bold Page Builder <= 4.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Icon Link

    MediumCVSS 5.4No exploitEPSS 0%

    bold-themes · bold page builderFeb 13, 2024

  • CVE-2024-1159
    21Monitor

    Bold Page Builder <= 4.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Raw Content

    MediumCVSS 5.4No exploitEPSS 0%

    bold-themes · bold page builderFeb 13, 2024

  • CVE-2024-47298
    21Monitor

    WordPress Bold Page Builder plugin <= 5.1.1 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    bold-themes · bold page builderOct 6, 2024

  • CVE-2024-30442
    21Monitor

    WordPress Bold Page Builder plugin <= 4.8.0 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    bold-themes · bold page builderMar 29, 2024

  • CVE-2024-47391
    21Monitor

    WordPress Bold Page Builder plugin < 5.1.1 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    bold-themes · bold page builderOct 5, 2024

  • CVE-2024-54382
    20Monitor

    WordPress Bold Page Builder plugin <= 5.1.5 - Path Traversal vulnerability

    MediumCVSS 4.9No exploitEPSS 2%

    bold-themes · bold page builderDec 16, 2024