What’s Vulnerable › Products

boldthemes Bold Timeline Lite vulnerabilities

6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your boldthemes Bold Timeline Lite version is affected

Latest boldthemes Bold Timeline Lite vulnerabilities

• CVE-2026-7438 — Bold Timeline Lite <= 1.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes (CVSS 6.4)
• CVE-2025-68513 — WordPress Bold Timeline Lite plugin <= 1.2.7 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
• CVE-2025-14032 — Bold Timeline Lite <= 1.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'title' Parameter in 'bold_timeline_group' Shortcode (CVSS 6.4)
• CVE-2023-45110 — WordPress Bold Timeline Lite plugin <= 1.1.9 - Broken Access Control vulnerability (CVSS 4.3)
• CVE-2024-43294 — WordPress Bold Timeline Lite plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
• CVE-2022-4828 — Bold Timeline Lite < 1.1.5 - Contributor+ Stored XSS via Shortcode (CVSS 5.4)