WordPress Bold Page Builder plugin <= 5.1.2 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Magnific Popups JavaScript Library vulnerability

🗓️ 31 Dec 2025 00:00:00Reported by WebbernautType

Authenticated contributors can trigger stored DOM-based XSS in Bold Page Builder up to version 5.1.2 Magnific Popups.

Reporter	Title	Published	Views	Family All 23
ATTACKERKB	CVE-2024-5647	3 Jul 202510:15	–	attackerkb
CNNVD	WordPress多款产品跨站脚本漏洞	3 Jul 202500:00	–	cnnvd
CVE	CVE-2024-5647	3 Jul 202509:22	–	cve
Cvelist	CVE-2024-5647 Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Magnific Popups JavaScript Library	3 Jul 202509:22	–	cvelist
EUVD	EUVD-2024-54725	3 Oct 202520:07	–	euvd
NVD	CVE-2024-5647	3 Jul 202510:15	–	nvd
Patchstack	WordPress DiviTorque plugin <= 4.0.5 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Magnific Popups JavaScript Library vulnerability	31 Dec 202500:00	–	patchstack
Patchstack	WordPress Carousel Slider plugin <= 2.2.14 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Magnific Popups JavaScript Library vulnerability	31 Dec 202500:00	–	patchstack
Patchstack	WordPress Happy Addons for Elementor plugin <= 3.12.2 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Magnific Popups JavaScript Library vulnerability	31 Dec 202500:00	–	patchstack
Patchstack	WordPress Robo Gallery plugin <= 3.2.22 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Magnific Popups JavaScript Library vulnerability	31 Dec 202500:00	–	patchstack

Vulners

Node

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/detail/multiple-plugins-various-versions-authenticated-contributor-stored-dom-based-cross-site-scripting-via-magnific-popups-javascript-library

31 Dec 2025 00:00Current

5.3Medium risk

Vulners AI Score5.3

CVSS 3.16.4

EPSS0.00338

SSVC