CVE-2025-68513 WordPress Bold Timeline Lite plugin <= 1.2.7 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in boldthemes Bold Timeline Lite bold-timeline-lite allows Stored XSS.This issue affects Bold Timeline Lite: from n/a through = 1.2.7...

CVE-2025-68513

The CVE-2025-68513 entry concerns the WordPress Bold Timeline Lite plugin (bold-timeline-lite). Affected versions are up to 1.2.7, with a Stored Cross‑Site Scripting (XSS) flaw caused by improper neutralization/escaping of user-supplied data during web page generation. Exploitation is described a...

CVE-2025-68513 WordPress Bold Timeline Lite plugin <= 1.2.7 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in boldthemes Bold Timeline Lite bold-timeline-lite allows Stored XSS.This issue affects Bold Timeline Lite: from n/a through = 1.2.7...

PT-2025-53084

Name of the Vulnerable Software and Affected Versions Bold Timeline Lite versions through 1.2.7 Description The Bold Timeline Lite plugin contains a flaw due to improper neutralization of input during web page generation, leading to a Stored Cross-site Scripting XSS condition. This allows an...

CVE-2025-68513: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in boldthemes Bold Timeline Lite bold-timeline-lite allows Stored XSS.This issue affects Bold Timeline Lite: from n/a through = 1.2.7...

WordPress plugin Bold Timeline Lite 安全漏洞

WordPress Bold Timeline Lite plugin is a free plugin designed for creating dynamic timeline content on WordPress websites. The WordPress Bold Timeline Lite plugin suffers from a cross-site scripting vulnerability that stems from the application's lack of effective filtering and escaping of...

CVE-2023-53945

creationtimestamp| type| source ---|---|--- 2025-12-19 23:50:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3maeuz6ecfk2c 2025-12-22 00:08:21+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3majwwslswq2u...

CVE-2025-68143

creationtimestamp| type| source ---|---|--- 2025-12-18 01:19:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ma7z2vaucw2y 2026-01-21 01:53:22+00:00| seen| https://bsky.app/profile/cryptonews-poster.bsky.social/post/3mcvks7wnai24 2026-01-21 01:54:01+00:00| seen|...

CVE-2025-52582

creationtimestamp| type| source ---|---|--- 2025-12-16 22:00:11+00:00| seen| https://infosec.place/objects/ed1a5a31-0480-452f-90c1-adc3d1a5f5ab 2026-01-02 15:06:52+00:00| published-proof-of-concept| Telegram/tl7ZkdWd3jypcKJxG02Ippoc2qeVaXdMcRN35QCe67VLbs...

CVE-2025-64634

creationtimestamp| type| source ---|---|--- 2025-12-16 09:45:58+00:00| seen| https://gist.github.com/Darkcrai86/d93246a331d70cbcd62e5786a5f3997a 2026-01-12 20:07:23+00:00| seen| Telegram/8sAp-VzdCpmBtZpXHcIlhxzqtmWknERFSKz0UU7al4qy2OU...

CVE-2025-14032

The Bold Timeline Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'title' parameter in the 'boldtimelinegroup' shortcode in all versions up to, and including, 1.2.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

CVE-2025-67727

creationtimestamp| type| source ---|---|--- 2025-12-12 07:32:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7rl3qjufj2q 2025-12-12 08:10:38+00:00| seen| https://gist.github.com/Darkcrai86/336c80a608d1c680c71671df6cccc755 2026-09-04 15:00:05+00:00| published-proof-of-concept|...

EUVD-2025-202986

The Bold Timeline Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'title' parameter in the 'boldtimelinegroup' shortcode in all versions up to, and including, 1.2.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

CVE-2025-14032

The Bold Timeline Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'title' parameter in the 'boldtimelinegroup' shortcode in all versions up to, and including, 1.2.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

CVE-2025-14032

CVE-2025-14032 affects Bold Timeline Lite (WordPress) up to version 1.2.7, exposing a Stored Cross‑Site Scripting (Stored XSS) via the title parameter in the bold_timeline_group shortcode. The issue stems from insufficient input sanitization and output escaping, enabling authenticated attackers w...

CVE-2025-14032 Bold Timeline Lite <= 1.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'title' Parameter in 'bold_timeline_group' Shortcode

The Bold Timeline Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'title' parameter in the 'boldtimelinegroup' shortcode in all versions up to, and including, 1.2.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

CVE-2025-14032 Bold Timeline Lite <= 1.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'title' Parameter in 'bold_timeline_group' Shortcode

The Bold Timeline Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'title' parameter in the 'boldtimelinegroup' shortcode in all versions up to, and including, 1.2.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

WordPress plugin Bold Timeline Lite 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin.... A cross-site...

CVE-2025-14032: Improper Neutralization of Input During Web Page Generation

The Bold Timeline Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'title' parameter in the 'boldtimelinegroup' shortcode in all versions up to, and including, 1.2.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

PT-2025-50844

The Bold Timeline Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'title' parameter in the 'bold timeline group' shortcode in all versions up to, and including, 1.2.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticate...