Exposición de Bold Page Builder

Page builders, WordPress plugins
24
score de exposición
2343
sitios usan
0
en explotación
0
críticos
Análisis Vexday

Com 35 CVEs catalogadas e nenhuma entrada no catálogo CISA KEV, o Bold Page Builder apresenta taxa de exploração ativa abaixo da média geral do catálogo, o que sugere pressão ofensiva relativamente menor no momento. O tipo de falha mais recorrente é CWE-79 (Cross-Site Scripting), padrão comum em plugins de construção de páginas que lidam com entrada de usuário e renderização dinâmica de conteúdo. A CVE mais perigosa atualmente ativa é CVE-2021-24579, com pontuação EPSS de 0,0822 — valor que indica probabilidade de exploração não desprezível e merece atenção em ambientes que ainda executam versões vulneráveis. O surgimento de uma nova CVE nos últimos 90 dias indica que a superfície de ataque ainda está em evolução, recomendando monitoramento contínuo e aplicação criteriosa de atualizações.

CVEs

41 resultados
CVE-2024-5647MEDIUMMultiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Magnific Popups JavaScript LibraryEPSS 0.3%CVE-2024-47391MEDIUMWordPress Bold Page Builder plugin < 5.1.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-47525MEDIUMWordPress Bold Page Builder plugin <= 5.3.0 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.3%CVE-2025-3715MEDIUMBold Page Builder <= 5.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-text' ParameterEPSS 0.3%CVE-2025-47488MEDIUMWordPress Bold Page Builder plugin <= 5.3.2 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.3%CVE-2025-12803MEDIUMBold Builder <= 5.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_tabs ShortcodeEPSS 0.3%CVE-2025-13463MEDIUMBold Page Builder <= 5.5.3 - Authenticated (Author+) Stored DOM-based Cross-Site Scripting in Post GridEPSS 0.3%CVE-2025-15267MEDIUMBold Page Builder <= 5.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_accordion_item ShortcodeEPSS 0.3%CVE-2026-84028MEDIUMBold Page Builder < 5.9.9 - Contributor+ Stored XSS via Slider Elements' additional_settingsEPSS 0.2%CVE-2026-84021MEDIUMBold Page Builder < 5.9.8 - Contributor+ Stored XSS via bt_bb_button/bt_bb_headline/bt_bb_icon URLEPSS 0.2%CVE-2026-84022MEDIUMBold Page Builder < 5.9.8 - Contributor+ Stored XSS via Multiple Shortcode Element AttributesEPSS 0.2%CVE-2026-5920MEDIUMBold Page Builder <= 5.9.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'shortcode_content' ParameterEPSS 0.2%CVE-2025-7730MEDIUMBold Page Builder <= 5.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via `percentage` ParameterEPSS 0.2%CVE-2025-12159MEDIUMBold Page Builder <= 5.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeEPSS 0.2%CVE-2025-54006MEDIUMWordPress Bold Page Builder plugin <= 5.4.1 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2025-66057MEDIUMWordPress Bold Page Builder plugin <= 5.5.2 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-2357MEDIUMBold Page Builder <= 5.6.8 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.2%CVE-2025-58194MEDIUMWordPress Bold Page Builder Plugin <= 5.4.3 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2026-25451MEDIUMWordPress Bold Page Builder plugin <= 5.6.9 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-62110MEDIUMWordPress Bold Page Builder plugin <= 5.9.9 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%