Medium
CVE-2025-47525
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 46
Reset filters
Medium
CVE-2025-47488
Bold Page Builder <= 5.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Low
CVE-2024-54382
Bold Page Builder <= 5.1.5 - Authenticated (Editor+) Path Traversal
Medium
CVE-2024-53801
Bold Page Builder <= 5.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-50417
Bold Page Builder <= 5.1.3 - Missing Authorization
Medium
CVE-2024-47391
Bold Page Builder <= 5.1.- - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-47298
Bold Page Builder <= 5.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-7100
Bold Page Builder <= 5.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_button Shortcode
Medium
CVE-2024-2736
Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via HTML Tags
Medium
CVE-2024-2735
Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via "Price List" Element
Medium
CVE-2024-2734
Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via AI Features
Medium
CVE-2024-2733
Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Separator Element
Medium
CVE-2024-3267
Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_price_list Shortcode
Medium
CVE-2024-3266
Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widget URL Attribute
Medium
CVE-2024-30179
Bold Page Builder <= 4.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via class
Medium
CVE-2024-1159
Bold Page Builder <= 4.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Raw Content
Medium
CVE-2024-1157
Bold Page Builder <= 4.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button URL
Medium
CVE-2024-1160
Bold Page Builder <= 4.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Icon Link
Medium
CVE-2023-49823
Bold Page Builder <= 4.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2022-2089
Bold Page Builder <= 4.3.2 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2021-24579
Bold Page Builder <= 3.1.5 - PHP Object Injection
High
CVE-2019-15821
Bold Page Builder <= 2.3.1 - Missing Authorization to Settings Update
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.