Exposure of Bootstrap

UI frameworks
58
exposure score
2,235,330
sites use
0
exploited
1
critical

CVEs

64 results
CVE-2026-14633MEDIUMkirilkirkov Ecommerce-CodeIgniter-Bootstrap Hidden REST API Endpoint set cross site scriptingEPSS 0.5%CVE-2022-4576MEDIUMEasy Bootstrap Shortcode <= 4.5.4 - Contributor+ Stored XSSEPSS 0.5%CVE-2022-4777—Bootstrap Shortcodes <= 3.4.0 - Contributor+ Stored XSS via ShortcodeEPSS 0.5%CVE-2026-14632MEDIUMkirilkirkov Ecommerce-CodeIgniter-Bootstrap Trusted Backend MY_Controller.php setReferrer redirectEPSS 0.5%CVE-2022-4974MEDIUMFreemius SDK <= 2.4.2 - Missing Authorization ChecksEPSS 0.4%CVE-2025-1647MEDIUMXSS in Bootstrap title attribute for Tooltip and PopoverEPSS 0.4%CVE-2026-88993MEDIUMAll Bootstrap Blocks <= 1.3.31 - Contributor+ Stored XSS via areoi/button type AttributeEPSS 0.4%CVE-2024-35169MEDIUMWordPress All Bootstrap Blocks plugin <= 1.3.15 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.4%CVE-2024-10329MEDIUMUltimate Bootstrap Elements for Elementor <= 1.4.6 - Authenticated (Contributor+) Sensitive Information ExposureEPSS 0.4%CVE-2024-51810MEDIUMWordPress Lewe Bootstrap Visuals plugin <= 3.0.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.4%CVE-2024-51851MEDIUMWordPress best bootstrap widgets for elementor plugin <= 1.0 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.4%CVE-2026-88994MEDIUMAll Bootstrap Blocks 1.3.20 - 1.3.31 - Contributor+ LFI via lightspeed Block AttributesEPSS 0.4%CVE-2026-14636MEDIUMkirilkirkov Ecommerce-CodeIgniter-Bootstrap Vendor Image Manager AddProduct.php do_upload_others_images path traversalEPSS 0.4%CVE-2026-4076MEDIUMSlider Bootstrap Carousel <= 1.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode AttributesEPSS 0.4%CVE-2026-112111MEDIUMThe Bootstrap Shortcodes plugin for WordPress before 3.4.6 is vulnerable to stored XSS via the id attribute of the [bs_tcontent] shortcode. EPSS 0.4%CVE-2024-11402HIGHWordPress Block Editor Bootstrap Blocks plugin <= 6.6.1 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.4%CVE-2025-30527MEDIUMWordPress My Bootstrap Menu plugin <= 1.2.1 - Stored Cross Site Scripting (XSS) vulnerabilityEPSS 0.4%CVE-2024-49677HIGHWordPress Bootstrap Buttons plugin <= 1.2 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2023-52196HIGHWordPress CPT Bootstrap Carousel Plugin <= 1.12 is vulnerable to Cross Site Scripting (XSS)EPSS 0.3%CVE-2024-12495MEDIUMBootstrap Blocks for WP Editor v2 <= 2.5.0 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.3%