Boldthemes vulnerabilities
63 vulnerabilities
Known vulnerabilities in Boldthemes products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 17 products.
Products
17- Bold Page Builder41 vulnerabilities
- Bold Timeline Lite5 vulnerabilities
- Bello Directory & Listing3 vulnerabilities
- Addison1 vulnerabilities
- Amwerk1 vulnerabilities
- Avala1 vulnerabilities
- Avantage1 vulnerabilities
- Celeste1 vulnerabilities
- Codiqa1 vulnerabilities
- Denticare1 vulnerabilities
- Goldenblatt1 vulnerabilities
- Ippsum1 vulnerabilities
- Medicare1 vulnerabilities
- Nestin1 vulnerabilities
- Nifty1 vulnerabilities
- Reconstruction1 vulnerabilities
- Travelicious1 vulnerabilities
CVE-2021-24319bold-themesbello+2
EPSS score1.68%
The Bello - Directory & Listing WordPress theme before 1.6.0 did not properly sanitise its post_excerpt parameter before outputting it back in the shop/my-account/bello-listing-endpoint/ page, leading to a Cross-Site Scripting issueCVE-2021-24321bold-themesbello+2EPSS score66.58%
The Bello - Directory & Listing WordPress theme before 1.6.0 did not sanitise the bt_bb_listing_field_price_range_to, bt_bb_listing_field_now_open, bt_bb_listing_field_my_lng, listing_list_view and bt_bb_listing_field_my_lat parameters before using them in a SQL statement, leading to SQL Injection issuesCVE-2021-24320bold-themesbello+2EPSS score10.77%
The Bello - Directory & Listing WordPress theme before 1.6.0 did not properly sanitise and escape its listing_list_view, bt_bb_listing_field_my_lat, bt_bb_listing_field_my_lng, bt_bb_listing_field_distance_value, bt_bb_listing_field_my_lat_default, bt_bb_listing_field_keyword, bt_bb_listing_field_location_autocomplete, bt_bb_listing_field_price_range_from and bt_bb_listing_field_price_range_to parameter in ints listing page, leading to reflected Cross-Site Scripting issues.CVE-2025-54723boldthemesdenticare+1EPSS score0.46%
Deserialization of Untrusted Data vulnerability in BoldThemes DentiCare denticare allows Object Injection.This issue affects DentiCare: from n/a through < 1.4.3.CVE-2025-54006boldthemesbold page builder+1EPSS score0.24%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in boldthemes Bold Page Builder bold-page-builder allows Stored XSS.This issue affects Bold Page Builder: from n/a through <= 5.4.1.CVE-2025-13463boldthemesbold page builder+1EPSS score0.28%
The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Post Grid component in all versions up to, and including, 5.5.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.CVE-2025-52724boldthemesamwerk+1EPSS score0.44%
Deserialization of Untrusted Data vulnerability in BoldThemes Amwerk amwerk allows Object Injection.This issue affects Amwerk: from n/a through <= 1.2.0.CVE-2025-68513boldthemesbold timeline lite+1EPSS score0.16%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in boldthemes Bold Timeline Lite bold-timeline-lite allows Stored XSS.This issue affects Bold Timeline Lite: from n/a through <= 1.2.7.CVE-2025-68541boldthemesippsum+1EPSS score0.45%
Deserialization of Untrusted Data vulnerability in BoldThemes Ippsum ippsum allows Object Injection.This issue affects Ippsum: from n/a through <= 1.2.0.CVE-2025-47488boldthemesbold page builder+1EPSS score0.29%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in boldthemes Bold Page Builder bold-page-builder allows DOM-Based XSS.This issue affects Bold Page Builder: from n/a through <= 5.3.2.CVE-2025-47525boldthemesbold page builder+1EPSS score0.31%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in boldthemes Bold Page Builder bold-page-builder allows Stored XSS.This issue affects Bold Page Builder: from n/a through <= 5.3.0.CVE-2025-14032boldthemesbold timeline lite+1EPSS score0.28%
The Bold Timeline Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'title' parameter in the 'bold_timeline_group' shortcode in all versions up to, and including, 1.2.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.CVE-2025-39499boldthemesmedicare+1EPSS score0.62%
Deserialization of Untrusted Data vulnerability in BoldThemes Medicare medicare allows Object Injection.This issue affects Medicare: from n/a through <= 2.1.0.CVE-2025-39495boldthemesavantage+1EPSS score0.62%
Deserialization of Untrusted Data vulnerability in BoldThemes Avantage avantage allows Object Injection.This issue affects Avantage: from n/a through <= 2.4.9.CVE-2025-7730boldthemesbold page builder+1EPSS score0.23%
The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘percentage’ parameter in all versions up to, and including, 5.4.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.CVE-2025-66057boldthemesbold page builder+1EPSS score0.19%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in boldthemes Bold Page Builder bold-page-builder allows DOM-Based XSS.This issue affects Bold Page Builder: from n/a through <= 5.5.2.CVE-2025-58194boldthemesbold page builder+1EPSS score0.17%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in boldthemes Bold Page Builder bold-page-builder allows Stored XSS.This issue affects Bold Page Builder: from n/a through <= 5.4.3.CVE-2025-67996boldthemesnestin+1EPSS score0.45%
Deserialization of Untrusted Data vulnerability in BoldThemes Nestin nestin allows Object Injection.This issue affects Nestin: from n/a through < 1.2.6.CVE-2025-67997boldthemestravelicious+1EPSS score0.45%
Deserialization of Untrusted Data vulnerability in BoldThemes Travelicious travelicious allows Object Injection.This issue affects Travelicious: from n/a through < 1.6.7.CVE-2025-5286boldthemesbold page builder+1EPSS score0.40%
The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘additional_settings’ parameter in all versions up to, and including, 5.3.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.