PatchTheCVEbold page builder vulnerabilities and fixes
Recent CVEs affecting bold page builder, with upgrade or downgrade steps. 6 tracked.
Also searched as: boldpagebuilder.
bold page builder has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 6. Most recent: 2024-12-16. Highest priority: CVE-2024-54382 (score 38/100).
- CVE-2024-7100 MEDIUM 6.4 UPGRADE The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's bt_bb
- CVE-2024-54382 MEDIUM 4.9 UPGRADE Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in boldthemes Bol
- CVE-2024-53801 MEDIUM 6.5 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in boldthem
- CVE-2024-50417 MEDIUM 4.3 UPGRADE Missing Authorization vulnerability in boldthemes Bold Page Builder bold-page-builder allows Exploiting Incorr
- CVE-2024-47391 MEDIUM 6.5 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in boldthem
- CVE-2024-47298 MEDIUM 6.5 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in boldthem
FAQ
How do I fix bold page builder vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is bold page builder being exploited right now?
None of the tracked bold page builder CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which bold page builder CVE should I patch first?
CVE-2024-54382 currently ranks highest (38/100): Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in boldthemes Bol.