CVE-2026-125680mediumCWE-79

CVE-2026-125680: medium-severity vulnerability in Bold Page Builder

WordPress Bold Page Builder plugin <= 5.9.11 - Cross Site Scripting (XSS) vulnerability

Published

Follow this CVE+ Monitor Bold Page Builder

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

10Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.5
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bold Themes Bold Page Builder bold-page-builder allows Stored XSS.This issue affects Bold Page Builder: from n/a through 5.9.11.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L
Affected products
Bold Themes · Bold Page Builder
Related CVEs — Bold Page Builder

In the same product, most dangerous first.

CVE-2026-125455MEDIUMWordPress Bold Page Builder plugin <= 5.9.11 - Cross Site Scripting (XSS) vulnerabilityEPSS —