PatchTheCVE: bold page builderhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2024-54382: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in boldthemes Bolhttps://patchthecve.com/cve/CVE-2024-54382.htmlhttps://patchthecve.com/cve/CVE-2024-54382.htmlWed, 17 Jun 2026 08:10:13 +0000MEDIUM 4.9: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in boldthemes Bold Page Builder bold-page-builder allows Path Traversal.This issue affects Bold Page Builder: from n/a through <= 5.1.5.CVE-2024-53801: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in boldthemhttps://patchthecve.com/cve/CVE-2024-53801.htmlhttps://patchthecve.com/cve/CVE-2024-53801.htmlWed, 17 Jun 2026 08:09:18 +0000MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in boldthemes Bold Page Builder bold-page-builder allows Stored XSS.This issue affects Bold Page Builder: from n/a through <= 5.2.1.CVE-2024-50417: Missing Authorization vulnerability in boldthemes Bold Page Builder bold-page-builder allows Exploiting Incorrhttps://patchthecve.com/cve/CVE-2024-50417.htmlhttps://patchthecve.com/cve/CVE-2024-50417.htmlWed, 17 Jun 2026 08:04:24 +0000MEDIUM 4.3: Missing Authorization vulnerability in boldthemes Bold Page Builder bold-page-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bold Page Builder: from n/a through <= 5.1.3.CVE-2024-47298: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in boldthemhttps://patchthecve.com/cve/CVE-2024-47298.htmlhttps://patchthecve.com/cve/CVE-2024-47298.htmlWed, 17 Jun 2026 07:56:50 +0000MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in boldthemes Bold Page Builder bold-page-builder allows Stored XSS.This issue affects Bold Page Builder: from n/a through <= 5.1.1.CVE-2024-47391: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in boldthemhttps://patchthecve.com/cve/CVE-2024-47391.htmlhttps://patchthecve.com/cve/CVE-2024-47391.htmlWed, 17 Jun 2026 07:57:01 +0000MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in boldthemes Bold Page Builder bold-page-builder allows Stored XSS.This issue affects Bold Page Builder: from n/a through < 5.1.1.CVE-2024-7100: The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's bt_bbhttps://patchthecve.com/cve/CVE-2024-7100.htmlhttps://patchthecve.com/cve/CVE-2024-7100.htmlWed, 17 Jun 2026 08:19:21 +0000MEDIUM 6.4: The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's bt_bb_button shortcode in all versions up to, and including, 5.0.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated