[ Vendor · 6 CVEs ]
boldthemes
CVEs affecting boldthemes published in the last 30 days, plus any boldthemes CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-62077 | 10 Oct 2026 | CVSS 9.8 | BoldThemes AvalaUnauthenticated PHP Object Injection in Avala <= 1.1.4 versions. | |
| CVE-2026-88037 | 30 Sep 2026 | CVSS 6.4 | boldthemes Bold Page BuilderThe Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `title` attribute of the `bt_bb_service` shortcode in… | |
| CVE-2026-6170 | 30 Sep 2026 | CVSS 6.4 | boldthemes Bold Page BuilderThe Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'images' parameter of the plugin's… | |
| CVE-2026-6171 | 30 Sep 2026 | CVSS 6.4 | boldthemes Bold Page BuilderThe Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'target' parameter of the plugin's bt_bb_icon… | |
| CVE-2026-6172 | 30 Sep 2026 | CVSS 6.4 | boldthemes Bold Page BuilderThe Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'caption' parameter of the plugin's bt_bb_image… | |
| CVE-2026-6173 | 30 Sep 2026 | CVSS 6.4 | boldthemes Bold Page BuilderThe Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'background_image' parameter of the plugin's… |