Medium
CVE-2026-88037
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 46
Reset filters
Medium
CVE-2026-6173
Bold Page Builder <= 5.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'background_image' Parameter
Medium
CVE-2026-6170
Bold Page Builder <= 5.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_css_image_grid 'images' Shortcode Attribute
Medium
CVE-2026-6171
Bold Page Builder <= 5.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'target' Shortcode Attribute
Medium
CVE-2026-6172
Bold Page Builder <= 5.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'caption' Parameter
Medium
CVE-2026-5920
Bold Page Builder <= 5.9.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'shortcode_content' Parameter
Medium
CVE-2026-62110
Bold Page Builder <= 5.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-84028
Bold Page Builder < 5.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-84022
Bold Page Builder < 5.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-84021
Bold Page Builder < 5.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-2357
Bold Page Builder <= 5.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-3694
Bold Page Builder <= 5.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_button Shortcode
Medium
CVE-2025-12159
Bold Page Builder <= 5.9.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2025-13463
Bold Page Builder <= 5.6.3 - Authenticated (Author+) Stored DOM-based Cross-Site Scripting in Post Grid
Medium
CVE-2025-12803
Bold Builder <= 5.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_tabs Shortcode
Medium
CVE-2025-15267
Bold Page Builder <= 5.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_accordion_item Shortcode
Medium
CVE-2026-25451
Bold Page Builder <= 5.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-66057
Bold Page Builder <= 5.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-7730
Bold Page Builder <= 5.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via `percentage` Parameter
Medium
CVE-2025-58194
Bold Page Builder <= 5.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-54006
Bold Page Builder <= 5.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-5647
Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Magnific Popups JavaScript Library
Medium
CVE-2025-5286
Bold Builder <= 5.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via additional_settings Parameter
Medium
CVE-2025-3715
Bold Page Builder <= 5.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-text' Parameter
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.