bold-themes kayıtları
bold-themes üreticisine ait 26 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %30,8
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')20
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2
- CWE-502 Deserialization of Untrusted Data1
- CWE-862 Missing Authorization1
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
26 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
59Planlayın | CVE-2021-24321İstismar yok | Bello < 1.6.0 - Unauthenticated Blind SQL Injectionbold-themes · bello · CWE-89 | Kritik9,8 | — | %66,6 | 1 Haz 2021 |
37İzleyin | CVE-2021-24579İstismar yok | Bold Page Builder < 3.1.6 - PHP Object Injectionbold-themes · bold page builder · CWE-502 | Yüksek8,8 | — | %8,2 | 30 Ağu 2021 |
36İzleyin | CVE-2024-50417İstismar yok | WordPress Bold Page Builder plugin <= 5.1.3 - Broken Access Control vulnerabilitybold-themes · bold page builder · CWE-862 | Yüksek8,8 | — | %1,9 | 19 Kas 2024 |
33İzleyin | CVE-2019-15821İstismar yok | The bold-page-builder plugin before 2.3.2 for WordPress has no protection against modifying settings and importing data.bold-themes · bold page builder | Yüksek7,5 | — | %11,0 | 30 Ağu 2019 |
27İzleyin | CVE-2021-24320Kavram kanıtı | Bello < 1.6.0 - Unauthenticated Reflected XSS & XFSbold-themes · bello · CWE-79 | Orta6,1 | — | %10,8 | 1 Haz 2021 |
27İzleyin | CVE-2021-24820İstismar yok | Cost Calculator <= 1.6 - Authenticated Local File Inclusionbold-themes · cost calculator · CWE-22 | Orta6,5 | — | %3,0 | 28 Şub 2022 |
22İzleyin | CVE-2021-24319İstismar yok | Bello < 1.6.0 - Authenticated Cross-Site Scripting (XSS) and XFSbold-themes · bello · CWE-79 | Orta5,4 | — | %1,7 | 1 Haz 2021 |
21İzleyin | CVE-2022-4828İstismar yok | Bold Timeline Lite < 1.1.5 - Contributor+ Stored XSS via Shortcodebold-themes · bold timeline lite · CWE-79 | Orta5,4 | — | %1,0 | 30 Oca 2023 |
21İzleyin | CVE-2024-2734İstismar yok | Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via AI Featuresbold-themes · bold page builder · CWE-79 | Orta5,4 | — | %0,5 | 10 Nis 2024 |
21İzleyin | CVE-2024-2733İstismar yok | Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Separator Elementbold-themes · bold page builder · CWE-79 | Orta5,4 | — | %0,5 | 10 Nis 2024 |
21İzleyin | CVE-2024-2735İstismar yok | Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via "Price List" Elementbold-themes · bold page builder · CWE-79 | Orta5,4 | — | %0,5 | 10 Nis 2024 |
21İzleyin | CVE-2024-2736İstismar yok | Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via HTML Tagsbold-themes · bold page builder · CWE-79 | Orta5,4 | — | %0,5 | 10 Nis 2024 |
21İzleyin | CVE-2023-49823İstismar yok | WordPress Bold Page Builder Plugin <= 4.6.1 is vulnerable to Cross Site Scripting (XSS)bold-themes · bold page builder · CWE-79 | Orta5,4 | — | %0,5 | 15 Ara 2023 |
21İzleyin | CVE-2024-7100İstismar yok | Bold Page Builder <= 5.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_button Shortcodebold-themes · bold page builder · CWE-79 | Orta5,4 | — | %0,4 | 30 Tem 2024 |
21İzleyin | CVE-2024-3266İstismar yok | Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widget URL Attributebold-themes · bold page builder · CWE-79 | Orta5,4 | — | %0,4 | 9 Nis 2024 |
21İzleyin | CVE-2024-30179İstismar yok | WordPress Bold Page Builder plugin <= 4.7.6 - Cross Site Scripting (XSS) vulnerabilitybold-themes · bold page builder · CWE-79 | Orta5,4 | — | %0,4 | 27 Mar 2024 |
21İzleyin | CVE-2024-3267İstismar yok | Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_price_list Shortcodebold-themes · bold page builder · CWE-79 | Orta5,4 | — | %0,4 | 9 Nis 2024 |
21İzleyin | CVE-2024-53801İstismar yok | WordPress Bold Page Builder plugin <= 5.2.1 - Cross Site Scripting (XSS) vulnerabilitybold-themes · bold page builder · CWE-79 | Orta5,4 | — | %0,4 | 6 Ara 2024 |
21İzleyin | CVE-2024-1157İstismar yok | Bold Page Builder <= 4.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button URLbold-themes · bold page builder · CWE-79 | Orta5,4 | — | %0,4 | 13 Şub 2024 |
21İzleyin | CVE-2024-1160İstismar yok | Bold Page Builder <= 4.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Icon Linkbold-themes · bold page builder · CWE-79 | Orta5,4 | — | %0,4 | 13 Şub 2024 |
21İzleyin | CVE-2024-1159İstismar yok | Bold Page Builder <= 4.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Raw Contentbold-themes · bold page builder · CWE-79 | Orta5,4 | — | %0,4 | 13 Şub 2024 |
21İzleyin | CVE-2024-47298İstismar yok | WordPress Bold Page Builder plugin <= 5.1.1 - Cross Site Scripting (XSS) vulnerabilitybold-themes · bold page builder · CWE-79 | Orta5,4 | — | %0,3 | 6 Eki 2024 |
21İzleyin | CVE-2024-30442İstismar yok | WordPress Bold Page Builder plugin <= 4.8.0 - Cross Site Scripting (XSS) vulnerabilitybold-themes · bold page builder · CWE-79 | Orta5,4 | — | %0,3 | 29 Mar 2024 |
21İzleyin | CVE-2024-47391İstismar yok | WordPress Bold Page Builder plugin < 5.1.1 - Cross Site Scripting (XSS) vulnerabilitybold-themes · bold page builder · CWE-79 | Orta5,4 | — | %0,3 | 5 Eki 2024 |
20İzleyin | CVE-2024-54382İstismar yok | WordPress Bold Page Builder plugin <= 5.1.5 - Path Traversal vulnerabilitybold-themes · bold page builder · CWE-22 | Orta4,9 | — | %2,2 | 16 Ara 2024 |
- CVE-2021-2432159Planlayın
Bello < 1.6.0 - Unauthenticated Blind SQL Injection
KritikCVSS 9,8İstismar yokEPSS %67bold-themes · bello1 Haz 2021
- CVE-2021-2457937İzleyin
Bold Page Builder < 3.1.6 - PHP Object Injection
YüksekCVSS 8,8İstismar yokEPSS %8bold-themes · bold page builder30 Ağu 2021
- CVE-2024-5041736İzleyin
WordPress Bold Page Builder plugin <= 5.1.3 - Broken Access Control vulnerability
YüksekCVSS 8,8İstismar yokEPSS %2bold-themes · bold page builder19 Kas 2024
- CVE-2019-1582133İzleyin
The bold-page-builder plugin before 2.3.2 for WordPress has no protection against modifying settings and importing data.
YüksekCVSS 7,5İstismar yokEPSS %11bold-themes · bold page builder30 Ağu 2019
- CVE-2021-2432027İzleyin
Bello < 1.6.0 - Unauthenticated Reflected XSS & XFS
OrtaCVSS 6,1Kavram kanıtıEPSS %11bold-themes · bello1 Haz 2021
- CVE-2021-2482027İzleyin
Cost Calculator <= 1.6 - Authenticated Local File Inclusion
OrtaCVSS 6,5İstismar yokEPSS %3bold-themes · cost calculator28 Şub 2022
- CVE-2021-2431922İzleyin
Bello < 1.6.0 - Authenticated Cross-Site Scripting (XSS) and XFS
OrtaCVSS 5,4İstismar yokEPSS %2bold-themes · bello1 Haz 2021
- CVE-2022-482821İzleyin
Bold Timeline Lite < 1.1.5 - Contributor+ Stored XSS via Shortcode
OrtaCVSS 5,4İstismar yokEPSS %1bold-themes · bold timeline lite30 Oca 2023
- CVE-2024-273421İzleyin
Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via AI Features
OrtaCVSS 5,4İstismar yokEPSS %1bold-themes · bold page builder10 Nis 2024
- CVE-2024-273321İzleyin
Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Separator Element
OrtaCVSS 5,4İstismar yokEPSS %1bold-themes · bold page builder10 Nis 2024
- CVE-2024-273521İzleyin
Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via "Price List" Element
OrtaCVSS 5,4İstismar yokEPSS %1bold-themes · bold page builder10 Nis 2024
- CVE-2024-273621İzleyin
Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via HTML Tags
OrtaCVSS 5,4İstismar yokEPSS %1bold-themes · bold page builder10 Nis 2024
- CVE-2023-4982321İzleyin
WordPress Bold Page Builder Plugin <= 4.6.1 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 5,4İstismar yokEPSS %0bold-themes · bold page builder15 Ara 2023
- CVE-2024-710021İzleyin
Bold Page Builder <= 5.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_button Shortcode
OrtaCVSS 5,4İstismar yokEPSS %0bold-themes · bold page builder30 Tem 2024
- CVE-2024-326621İzleyin
Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widget URL Attribute
OrtaCVSS 5,4İstismar yokEPSS %0bold-themes · bold page builder9 Nis 2024
- CVE-2024-3017921İzleyin
WordPress Bold Page Builder plugin <= 4.7.6 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 5,4İstismar yokEPSS %0bold-themes · bold page builder27 Mar 2024
- CVE-2024-326721İzleyin
Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_price_list Shortcode
OrtaCVSS 5,4İstismar yokEPSS %0bold-themes · bold page builder9 Nis 2024
- CVE-2024-5380121İzleyin
WordPress Bold Page Builder plugin <= 5.2.1 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 5,4İstismar yokEPSS %0bold-themes · bold page builder6 Ara 2024
- CVE-2024-115721İzleyin
Bold Page Builder <= 4.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button URL
OrtaCVSS 5,4İstismar yokEPSS %0bold-themes · bold page builder13 Şub 2024
- CVE-2024-116021İzleyin
Bold Page Builder <= 4.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Icon Link
OrtaCVSS 5,4İstismar yokEPSS %0bold-themes · bold page builder13 Şub 2024
- CVE-2024-115921İzleyin
Bold Page Builder <= 4.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Raw Content
OrtaCVSS 5,4İstismar yokEPSS %0bold-themes · bold page builder13 Şub 2024
- CVE-2024-4729821İzleyin
WordPress Bold Page Builder plugin <= 5.1.1 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 5,4İstismar yokEPSS %0bold-themes · bold page builder6 Eki 2024
- CVE-2024-3044221İzleyin
WordPress Bold Page Builder plugin <= 4.8.0 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 5,4İstismar yokEPSS %0bold-themes · bold page builder29 Mar 2024
- CVE-2024-4739121İzleyin
WordPress Bold Page Builder plugin < 5.1.1 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 5,4İstismar yokEPSS %0bold-themes · bold page builder5 Eki 2024
- CVE-2024-5438220İzleyin
WordPress Bold Page Builder plugin <= 5.1.5 - Path Traversal vulnerability
OrtaCVSS 4,9İstismar yokEPSS %2bold-themes · bold page builder16 Ara 2024