Bold Page Builder
Vendor:
First CVE: Aug 30, 2019 · Active for 6 years
21
Total CVEs
More Total CVEs than 95% of tracked products
4.2
Avg CVEs / Year
Higher CVE frequency than 88% of tracked products
5.8
Avg CVSS
Higher Avg CVSS than 20% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Bold Page Builder over time
Volume of CVEsAvg CVSS Base Score
First CVE
Aug 30, 2019
6 years ago
Most Recent CVE
Dec 16, 2024
589 days ago
CVE Severity & Scoring
Bold Page Builder21 CVEs
86%
14%
All CVEs353,173 CVEs
45%
40%
11%
MediumHigh
Attack Vector
Local0 (0.0%)
Network21 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low21 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None4 (19.0%)
Unknown0 (0.0%)
Required17 (81.0%)
Privileges Required
Low18 (85.7%)
High2 (9.5%)
None1 (4.8%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (21 CVEs).
21 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2021-24579HIGH The bt_bb_get_grid AJAX action of the Bold Page Builder WordPress plugin before 3.1.6 passes user input into the unserialize() function without any validation or sanitisation, whic | Aug 30, 2021 | 8.8 | 30 | NO | NO |
CVE-2019-15821HIGH The bold-page-builder plugin before 2.3.2 for WordPress has no protection against modifying settings and importing data. | Aug 30, 2019 | 7.5 | 27 | NO | NO |
CVE-2024-50417HIGH Missing Authorization vulnerability in boldthemes Bold Page Builder bold-page-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bol | Nov 19, 2024 | 8.8 | 25 | NO | NO |
CVE-2024-7100MEDIUM The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's bt_bb_button shortcode in all versions up to, and including, 5.0.2 due to i | Jul 30, 2024 | 5.4 | 20 | NO | NO |
CVE-2024-2734MEDIUM The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's AI features all versions up to, and including, 4.8.8 due to insufficient in | Apr 10, 2024 | 5.4 | 18 | NO | NO |
CVE-2024-1160MEDIUM The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Icon Link in all versions up to, and including, 4.8.0 due to insufficient i | Feb 13, 2024 | 5.4 | 18 | NO | NO |
CVE-2024-1159MEDIUM The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in all versions up to, and including, 4.8.0 due to insufficien | Feb 13, 2024 | 5.4 | 18 | NO | NO |
CVE-2024-47298MEDIUM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in boldthemes Bold Page Builder bold-page-builder allows Stored XSS.This issue af | Oct 6, 2024 | 5.4 | 17 | NO | NO |
CVE-2024-47391MEDIUM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in boldthemes Bold Page Builder bold-page-builder allows Stored XSS.This issue af | Oct 5, 2024 | 5.4 | 17 | NO | NO |
CVE-2024-2736MEDIUM The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via HTML Tags in all versions up to, and including, 4.8.8 due to insufficient input sanitiza | Apr 10, 2024 | 5.4 | 17 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (21 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (21 CVEs).
Media Mentions
Signals from CVEs in this product scope (21 CVEs).
Top CNAs Publishing CVEs For Bold Page Builder
Top CWEs
Versions
No cataloged versions.