WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
bold-page-builder
Published
2025-10-23
Title
Bold Page Builder < 5.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via `percentage` Parameter
Slug
bold-page-builder
Published
2025-11-27
Title
Bold Page Builder < 5.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
bold-page-builder
Published
2026-02-06
Title
Bold Page Builder <= 5.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_accordion_item Shortcode
Slug
bold-page-builder
Published
2026-02-06
Title
Bold Builder <= 5.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_tabs Shortcode
Slug
bold-page-builder
Published
2026-02-06
Title
Bold Page Builder <= 5.5.3 - Authenticated (Author+) Stored DOM-based Cross-Site Scripting in Post Grid
Slug
bold-page-builder
Published
2026-02-06
Title
Bold Page Builder <= 5.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
bold-page-builder
Published
2026-01-20
Title
Bold Page Builder <= 5.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
bold-pagos-en-linea
Published
2025-01-13
Title
Bold pagos en linea < 3.1.5 - Reflected Cross-Site Scripting
Slug
bold-timeline-lite
Published
2023-01-03
Title
Bold Timeline Lite < 1.1.5 - Contributor+ Stored XSS via Shortcode
Slug
bold-timeline-lite
Published
2023-10-06
Title
Bold Timeline Lite < 1.2.0 - Missing Authorization to Admin Notice Dismissal
Slug
bold-timeline-lite
Published
2024-08-16
Title
Bold Timeline Lite < 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
bold-timeline-lite
Published
2025-12-11
Title
Bold Timeline Lite < 1.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'title' Parameter in 'bold_timeline_group' Shortcode
Slug
bold-timeline-lite
Published
2025-12-27
Title
Bold Timeline Lite < 1.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
boldermail
Published
2025-08-05
Title
Boldermail <= 2.4.0 - Authenticated (Contributor+) PHP Object Injection
Slug
boldgrid-backup
Published
2020-12-14
Title
Total Upkeep by BoldGrid < 1.14.10 - Unauthenticated Backup Download
Slug
boldgrid-backup
Published
2020-12-14
Title
Total Upkeep by BoldGrid < 1.14.10 - Sensitive Data Disclosure (Server IP Address, UID etc)
Slug
boldgrid-backup
Published
2022-02-24
Title
Total Upkeep < 1.14.14 - Subscriber+ Backup Disclosure
Slug
boldgrid-backup
Published
2024-02-02
Title
Total Upkeep < 1.15.9 - Improper Authorization to Unauthenticated Arbitrary File Download
Slug
boldgrid-backup
Published
2024-11-26
Title
Total Upkeep < 1.16.7 - Authenticated (Administrator+) Remote Code Execution via Backup Settings
Slug
boldgrid-backup
Published
2025-02-26
Title
Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid < 1.16.9 - Authenticated (Administrator+) Server-Side Request Forgery
Slug
boldgrid-backup
Published
2025-03-25
Title
Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid < 1.17.0 - Authenticated (Admin+) Command Injection
Slug
boldgrid-easy-seo
Published
2024-03-29
Title
BoldGrid Easy SEO – Simple and Effective SEO < 1.6.14 - Authenticated(Contributor+) Stored Cross-Site Scripting via Meta Description
Slug
boldgrid-easy-seo
Published
2024-04-05
Title
BoldGrid Easy SEO – Simple and Effective SEO < 1.6.15 - Information Exposure
Slug
bon-toolkit
Published
2025-05-14
Title
Bon Toolkit <= 1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
bonanza-woocommerce-free-gifts-lite
Published
2025-07-28
Title
Bonanza – WooCommerce Free Gifts Lite <= 1.0.0 - Missing Authorization to Authenticated (Subscriber+) Opt In Success