Bold Page Builder

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   Bold Page Builder

Information

Software Type Plugin
Software Slug bold-page-builder (view on wordpress.org)
Software Status Active
Software Author boldthemes
Software Downloads 2,826,774
Software Active Installs 40,000
Software Record Last Updated July 11, 2026

Showing 1-20 of 35 Vulnerabilities

Submit a Vulnerability
Bold Page Builder <= 5.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_button Shortcode
6.4
CVE-2026-3694
May 13, 2026
Researcher: zaim
Bold Page Builder <= 5.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
6.4
CVE-2025-12159
Feb 6, 2026
Researcher: Athiwat Tiprasaharn (Jitlada)
Bold Page Builder <= 5.5.3 - Authenticated (Author+) Stored DOM-based Cross-Site Scripting in Post Grid
6.4
CVE-2025-13463
Feb 6, 2026
Researcher: Athiwat Tiprasaharn (Jitlada)
Bold Builder <= 5.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_tabs Shortcode
6.4
CVE-2025-12803
Feb 6, 2026
Researcher: Muhammad Yudha - DJ
Bold Page Builder <= 5.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_accordion_item Shortcode
6.4
CVE-2025-15267
Feb 6, 2026
Researcher: theviper17y
Bold Page Builder <= 5.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2026-25451
Jan 20, 2026
Researcher: theviper17
Bold Page Builder <= 5.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2025-66057
Nov 27, 2025
Researcher: Tarcísio Luchesi(Poystick)
Bold Page Builder <= 5.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via `percentage` Parameter
6.4
CVE-2025-7730
Oct 23, 2025
Researcher: Peter Thaleikis
Bold Page Builder <= 5.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2025-58194
Aug 27, 2025
Researcher: Muhammad Yudha - DJ
Bold Page Builder <= 5.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2025-54006
Jul 16, 2025
Researcher: theviper17y
Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Magnific Popups JavaScript Library
6.4
CVE-2024-5647
Jul 2, 2025
Researcher: Webbernaut
Bold Builder <= 5.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via additional_settings Parameter
6.4
CVE-2025-5286
May 28, 2025
Researcher: Muhammad Yudha - DJ
Bold Page Builder <= 5.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-text' Parameter
6.4
CVE-2025-3715
May 17, 2025
Researcher: Webbernaut
Bold Page Builder <= 5.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2025-47488
May 7, 2025
Researcher: Peter Thaleikis
Bold Page Builder <= 5.3.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
4.4
CVE-2025-47525
May 7, 2025
Researcher: Nabil Irawan
Bold Page Builder <= 5.1.5 - Authenticated (Editor+) Path Traversal
2.7
CVE-2024-54382
Dec 11, 2024
Researcher: Trương Hữu Phúc (truonghuuphuc)
Bold Page Builder <= 5.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2024-53801
Dec 2, 2024
Researcher: Nirmal Kavaiya
Bold Page Builder <= 5.1.3 - Missing Authorization
4.3
CVE-2024-50417
Oct 24, 2024
Researcher: Trương Hữu Phúc (truonghuuphuc)
Bold Page Builder <= 5.1.- - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2024-47391
Sep 30, 2024
Researcher: Robert DeVore
Bold Page Builder <= 5.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2024-47298
Sep 24, 2024
Researcher: stealthcopter
Title Status CVE ID CVSS Researchers Date
Bold Page Builder <= 5.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_button Shortcode Patched CVE-2026-3694 6.4 zaim May 13, 2026
Bold Page Builder <= 5.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Unpatched CVE-2025-12159 6.4 Athiwat Tiprasaharn (Jitlada) February 6, 2026
Bold Page Builder <= 5.5.3 - Authenticated (Author+) Stored DOM-based Cross-Site Scripting in Post Grid Unpatched CVE-2025-13463 6.4 Athiwat Tiprasaharn (Jitlada) February 6, 2026
Bold Builder <= 5.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_tabs Shortcode Unpatched CVE-2025-12803 6.4 Muhammad Yudha - DJ February 6, 2026
Bold Page Builder <= 5.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_accordion_item Shortcode Unpatched CVE-2025-15267 6.4 theviper17y February 6, 2026
Bold Page Builder <= 5.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting Patched CVE-2026-25451 6.4 theviper17 January 20, 2026
Bold Page Builder <= 5.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting Patched CVE-2025-66057 6.4 Tarcísio Luchesi(Poystick) November 27, 2025
Bold Page Builder <= 5.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via `percentage` Parameter Patched CVE-2025-7730 6.4 Peter Thaleikis October 23, 2025
Bold Page Builder <= 5.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting Patched CVE-2025-58194 6.4 Muhammad Yudha - DJ August 27, 2025
Bold Page Builder <= 5.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting Patched CVE-2025-54006 6.4 theviper17y July 16, 2025
Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Magnific Popups JavaScript Library Patched CVE-2024-5647 6.4 Webbernaut July 2, 2025
Bold Builder <= 5.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via additional_settings Parameter Patched CVE-2025-5286 6.4 Muhammad Yudha - DJ May 28, 2025
Bold Page Builder <= 5.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-text' Parameter Patched CVE-2025-3715 6.4 Webbernaut May 17, 2025
Bold Page Builder <= 5.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting Patched CVE-2025-47488 6.4 Peter Thaleikis May 7, 2025
Bold Page Builder <= 5.3.0 - Authenticated (Administrator+) Stored Cross-Site Scripting Patched CVE-2025-47525 4.4 Nabil Irawan May 7, 2025
Bold Page Builder <= 5.1.5 - Authenticated (Editor+) Path Traversal Patched CVE-2024-54382 2.7 Trương Hữu Phúc (truonghuuphuc) December 11, 2024
Bold Page Builder <= 5.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting Patched CVE-2024-53801 6.4 Nirmal Kavaiya December 2, 2024
Bold Page Builder <= 5.1.3 - Missing Authorization Patched CVE-2024-50417 4.3 Trương Hữu Phúc (truonghuuphuc) October 24, 2024
Bold Page Builder <= 5.1.- - Authenticated (Contributor+) Stored Cross-Site Scripting Patched CVE-2024-47391 6.4 Robert DeVore September 30, 2024
Bold Page Builder <= 5.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting Patched CVE-2024-47298 6.4 stealthcopter September 24, 2024

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation