Exposure of Bootstrap

UI frameworks
58
exposure score
2,235,330
sites use
0
exploited
1
critical

CVEs

64 results
CVE-2024-12722MEDIUMTwitter Bootstrap Collapse aka Accordian Shortcode <= 1.0 - Stored XSS via ShortcodeEPSS 0.3%CVE-2024-2132MEDIUMUltimate Bootstrap Elements for Elementor <= 1.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image WidgetEPSS 0.3%CVE-2023-47851MEDIUMWordPress Bootstrap Shortcodes Ultimate Plugin <= 4.3.1 is vulnerable to Cross Site Scripting (XSS)EPSS 0.3%CVE-2025-22743MEDIUMWordPress Twitter Bootstrap Collapse aka Accordian Shortcode plugin <= 1.0 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-11822MEDIUMWP Bootstrap Tabs <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeEPSS 0.3%CVE-2019-25642HIGHBootstrapy CMS Lastest Multiple SQL Injection via Forum and Contact ModulesEPSS 0.3%CVE-2025-30951MEDIUMWordPress BlockStrap Page Builder - Bootstrap Blocks plugin <= 0.1.36 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.3%CVE-2024-43349MEDIUMWordPress All Bootstrap Blocks plugin <= 1.3.19 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2024-13549MEDIUMAll Bootstrap Blocks <= 1.3.26 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.3%CVE-2025-26551HIGHWordPress Bootstrap collapse plugin <= 1.0.4 - CSRF to Stored Cross-Site Scripting vulnerabilityEPSS 0.3%CVE-2025-3901MEDIUMBootstrap Site Alert - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-042EPSS 0.2%CVE-2025-54733MEDIUMWordPress All Bootstrap Blocks Plugin <= 1.3.28 - Broken Access Control VulnerabilityEPSS 0.2%CVE-2025-8776MEDIUMEpic Bootstrap Buttons <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via icol ParameterEPSS 0.2%CVE-2025-27826MEDIUMAn XSS issue was discovered in the Bootstrap Lite theme before 1.x-1.4.5 for Backdrop CMS. It doesn't sufficiently sanitize certain class naEPSS 0.2%CVE-2025-27825MEDIUMAn XSS issue was discovered in the Bootstrap 5 Lite theme before 1.x-1.0.3 for Backdrop CMS. It doesn't sufficiently sanitize certain class EPSS 0.2%CVE-2025-11753MEDIUMMulti-language Responsive Portfolio WordPress <= 1.0 - Authenticated (Admin+) Stored Cross-Site ScriptingEPSS 0.2%CVE-2023-35047MEDIUMWordPress All Bootstrap Blocks Plugin <= 1.3.6 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.2%CVE-2024-0847MEDIUM5280 Bootstrap Modal Contact Form <= 1.0 - Cross-Site Request Forgery to Bulk Delete MessagesEPSS 0.2%CVE-2025-11764MEDIUMShortcodes Bootstrap <= 1.1 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.2%CVE-2025-62095MEDIUMWordPress Bootstrap Modals plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%