Bold Page Builder

Güvenlik açıkları

• CVE-2024-50417giriş gerekir≤ 5.1.3

  WordPress Bold Page Builder plugin <= 5.1.3 - Broken Access Control vulnerability

  Yüksek 8.8

• CVE-2019-15821kimlik doğrulamasız

  The bold-page-builder plugin before 2.3.2 for WordPress has no protection against modifying settings and importing data.

  Yüksek 7.5

• CVE-2026-25451giriş gerekir≤ 5.6.9

  WordPress Bold Page Builder plugin <= 5.6.9 - Cross Site Scripting (XSS) vulnerability

  Orta 6.5

• CVE-2025-66057giriş gerekir≤ 5.5.2

  WordPress Bold Page Builder plugin <= 5.5.2 - Cross Site Scripting (XSS) vulnerability

  Orta 6.5

• CVE-2025-58194giriş gerekir≤ 5.4.3

  WordPress Bold Page Builder Plugin <= 5.4.3 - Cross Site Scripting (XSS) Vulnerability

  Orta 6.5

• CVE-2025-54006giriş gerekir≤ 5.4.1

  WordPress Bold Page Builder plugin <= 5.4.1 - Cross Site Scripting (XSS) Vulnerability

  Orta 6.5

• CVE-2025-47488giriş gerekir≤ 5.3.2

  WordPress Bold Page Builder plugin <= 5.3.2 - Cross Site Scripting (XSS) Vulnerability

  Orta 6.5

• CVE-2026-62110katılımcı+≤ 5.9.9

  WordPress Bold Page Builder plugin <= 5.9.9 - Cross Site Scripting (XSS) vulnerability

  Orta 6.5

• CVE-2026-88037katılımcı+≤ 5.7.2

  Bold Page Builder <= 5.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_service title

  Orta 6.4

• CVE-2026-6173katılımcı+≤ 5.7.2

  Bold Page Builder <= 5.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'background_image' Parameter

  Orta 6.4

• CVE-2026-6172katılımcı+≤ 5.7.2

  Bold Page Builder <= 5.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'caption' Parameter

  Orta 6.4

• CVE-2026-6171katılımcı+≤ 5.7.2

  Bold Page Builder <= 5.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'target' Shortcode Attribute

  Orta 6.4

• CVE-2026-6170katılımcı+≤ 5.7.2

  Bold Page Builder <= 5.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_css_image_grid 'images' Shortcode Attribute

  Orta 6.4

• CVE-2026-5920katılımcı+≤ 5.9.6

  Bold Page Builder <= 5.9.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'shortcode_content' Parameter

  Orta 6.4

• CVE-2026-2357katılımcı+≤ 5.6.8

  Bold Page Builder <= 5.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting

  Orta 6.4

• CVE-2026-3694katılımcı+≤ 5.6.8

  Bold Page Builder <= 5.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_button Shortcode

  Orta 6.4

• CVE-2025-15267katılımcı+≤ 5.6.1

  Bold Page Builder <= 5.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_accordion_item Shortcode

  Orta 6.4

• CVE-2025-13463yazar+≤ 5.5.3

  Bold Page Builder <= 5.5.3 - Authenticated (Author+) Stored DOM-based Cross-Site Scripting in Post Grid

  Orta 6.4

• CVE-2025-12803katılımcı+≤ 5.5.1

  Bold Builder <= 5.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_tabs Shortcode

  Orta 6.4

• CVE-2025-12159katılımcı+≤ 5.4.8

  Bold Page Builder <= 5.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

  Orta 6.4

• CVE-2025-7730katılımcı+≤ 5.4.5

  Bold Page Builder <= 5.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via `percentage` Parameter

  Orta 6.4

• CVE-2025-5286katılımcı+≤ 5.3.6

  Bold Builder <= 5.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via additional_settings Parameter

  Orta 6.4

• CVE-2025-3715katılımcı+≤ 5.3.5

  Bold Page Builder <= 5.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-text' Parameter

  Orta 6.4

• CVE-2025-47525yüksek yetki≤ 5.3.0

  WordPress Bold Page Builder plugin <= 5.3.0 - Cross Site Scripting (XSS) Vulnerability

  Orta 5.9

• CVE-2024-53801giriş gerekir≤ 5.2.1

  WordPress Bold Page Builder plugin <= 5.2.1 - Cross Site Scripting (XSS) vulnerability

  Orta 5.4

• CVE-2024-47298giriş gerekir≤ 5.1.1

  WordPress Bold Page Builder plugin <= 5.1.1 - Cross Site Scripting (XSS) vulnerability

  Orta 5.4

• CVE-2024-47391giriş gerekir≤ 5.1.1

  WordPress Bold Page Builder plugin < 5.1.1 - Cross Site Scripting (XSS) vulnerability

  Orta 5.4

• CVE-2024-30442giriş gerekir≤ 4.8.0

  WordPress Bold Page Builder plugin <= 4.8.0 - Cross Site Scripting (XSS) vulnerability

  Orta 5.4

• CVE-2024-30179giriş gerekir≤ 4.7.6

  WordPress Bold Page Builder plugin <= 4.7.6 - Cross Site Scripting (XSS) vulnerability

  Orta 5.4

• CVE-2023-49823giriş gerekir≤ 4.6.1

  WordPress Bold Page Builder Plugin <= 4.6.1 is vulnerable to Cross Site Scripting (XSS)

  Orta 5.4

• CVE-2024-7100katılımcı+≤ 5.0.2

  Bold Page Builder <= 5.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_button Shortcode

  Orta 5.4

• CVE-2024-2736katılımcı+≤ 4.8.8

  Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via HTML Tags

  Orta 5.4

• CVE-2024-2735katılımcı+≤ 4.8.8

  Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via "Price List" Element

  Orta 5.4

• CVE-2024-2734katılımcı+≤ 4.8.8

  Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via AI Features

  Orta 5.4

• CVE-2024-2733katılımcı+≤ 4.8.8

  Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Separator Element

  Orta 5.4

• CVE-2024-3267katılımcı+≤ 4.8.8

  Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_price_list Shortcode

  Orta 5.4

• CVE-2024-3266katılımcı+≤ 4.8.8

  Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widget URL Attribute

  Orta 5.4

• CVE-2024-1160katılımcı+≤ 4.8.0

  Bold Page Builder <= 4.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Icon Link

  Orta 5.4

• CVE-2024-1159katılımcı+≤ 4.8.0

  Bold Page Builder <= 4.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Raw Content

  Orta 5.4

• CVE-2024-1157katılımcı+≤ 4.8.0

  Bold Page Builder <= 4.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button URL

  Orta 5.4

• CVE-2024-54382yüksek yetki≤ 5.1.5

  WordPress Bold Page Builder plugin <= 5.1.5 - Path Traversal vulnerability

  Orta 4.9