{"id":"CVE-2026-125680","kind":"vulnerability","aliases":["CVE-2026-125680"],"related":[],"title":"Bold Page Builder WordPress plugin: stored XSS through versions 5.9.11","description":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bold Themes Bold Page Builder bold-page-builder allows Stored XSS.This issue affects Bold Page Builder: from n/a through 5.9.11.","summary":"Bold Page Builder, a WordPress page-building plugin by Bold Themes, has a stored cross-site scripting flaw in versions up to 5.9.11. An attacker who can store content on the site can make script run in other visitors' browsers, including administrators.","severity":"medium","cvss":6.5,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"Bold Page Builder","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["bold-page-builder","package","wordpress"],"not_affected_if":["plugin-newer-than-5.9.11","plugin-not-installed"],"how_to_check":"- Check the installed Bold Page Builder plugin version in the WordPress admin under Plugins\n- Look for `bold-page-builder` in the plugin directory `wp-content/plugins/`\n- Check the version header in `wp-content/plugins/bold-page-builder/` files","fix":"- Bold Page Builder: unknown (sources do not name a fixed version)","status":"open","published_at":"2026-11-11T12:19:50+00:00","first_seen_at":"2026-11-11T12:27:12+00:00","triaged_at":"2026-11-11T12:28:33+00:00","updated_at":"2026-11-11T12:28:33+00:00","category":"package","confidence":0.6,"triage":{"at":"2026-11-11T12:28:33Z","model":"claude-haiku-5-5","output":{"fix":"- Bold Page Builder: unknown (sources do not name a fixed version)","reach":"internet","title":"Bold Page Builder WordPress plugin: stored XSS through versions 5.9.11","impact":"medium","summary":"Bold Page Builder, a WordPress page-building plugin by Bold Themes, has a stored cross-site scripting flaw in versions up to 5.9.11. An attacker who can store content on the site can make script run in other visitors' browsers, including administrators.","audience":"businesses","category":"package","nicknames":[],"who_cares":["wordpress","bold-page-builder"],"confidence":0.6,"fix_status":"unknown","needs_auth":"unknown","worst_case":"Script runs in visitors' browsers, possibly taking over admin sessions","analyst_note":"Confirm the fixed version and the auth requirement from the Bold Themes or WPScan advisory; NVD gives only the affected range.","how_to_check":"- Check the installed Bold Page Builder plugin version in the WordPress admin under Plugins\n- Look for `bold-page-builder` in the plugin directory `wp-content/plugins/`\n- Check the version header in `wp-content/plugins/bold-page-builder/` files","plain_action":"","product_name":"Bold Page Builder","needs_analyst":true,"not_affected_if":["plugin-not-installed","plugin-newer-than-5.9.11"],"who_is_affected":"Sites running the Bold Page Builder plugin at version 5.9.11 or earlier are exposed. The attacker needs a way to store content the page later shows, such as a contributor or comment account, so sites with open registration or many editors carry more risk. Sites that do not run this plugin can skip it.","user_interaction":"unknown","product_ecosystem":"vendor","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000778,"input_tokens":4553,"output_tokens":646,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-125680':13A,16A '-2026':12A,15A '5.9.11':10A,50B,104C 'administr':69B 'affect':97C 'allow':93C 'attack':52B 'bold':1A,17A,21B,26B,36B,84C,86C,90C,98C 'bold-page-build':20B,89C 'browser':67B 'build':33B 'builder':3A,19A,23B,28B,88C,92C,100C 'content':56B 'cross':42B,79C 'cross-sit':41B,78C 'cve':11A,14A 'flaw':45B 'generat':77C 'improp':70C 'includ':68B 'input':73C 'issu':96C 'make':61B 'n/a':102C 'neutral':71C 'packag':24B 'page':2A,18A,22B,27B,32B,76C,87C,91C,99C 'page-build':31B 'plugin':5A,34B 'run':63B 'script':44B,62B,81C 'site':43B,59B,80C 'store':6A,40B,55B,94C 'theme':37B,85C 'version':9A,47B 'visitor':66B 'vulner':82C 'web':75C 'wordpress':4A,25B,30B 'xss':7A 'xss.this':95C","nicknames":[],"mitigations":[],"who_affected":"Sites running the Bold Page Builder plugin at version 5.9.11 or earlier are exposed. The attacker needs a way to store content the page later shows, such as a contributor or comment account, so sites with open registration or many editors carry more risk. Sites that do not run this plugin can skip it.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"unknown","audience":"businesses","plain_action":null,"pkeys":["boldpagebuilder","pagebuilder"],"ptokens":["bold","builder","page"],"labels":["boldpagebuilder","medium","package","vendor","wordpress"],"campaign_type":null,"search_a":"'-125680':13A,16A '-2026':12A,15A '5.9.11':10A 'bold':1A,17A 'builder':3A,19A 'cve':11A,14A 'page':2A,18A 'plugin':5A 'store':6A 'version':9A 'wordpress':4A 'xss':7A","search_b":"'5.9.11':50B 'administr':69B 'attack':52B 'bold':21B,26B,36B 'bold-page-build':20B 'browser':67B 'build':33B 'builder':23B,28B 'content':56B 'cross':42B 'cross-sit':41B 'flaw':45B 'includ':68B 'make':61B 'packag':24B 'page':22B,27B,32B 'page-build':31B 'plugin':34B 'run':63B 'script':44B,62B 'site':43B,59B 'store':40B,55B 'theme':37B 'version':47B 'visitor':66B 'wordpress':25B,30B","search_c":"'5.9.11':104C 'affect':97C 'allow':93C 'bold':84C,86C,90C,98C 'bold-page-build':89C 'builder':88C,92C,100C 'cross':79C 'cross-sit':78C 'generat':77C 'improp':70C 'input':73C 'issu':96C 'n/a':102C 'neutral':71C 'page':76C,87C,91C,99C 'script':81C 'site':80C 'store':94C 'theme':85C 'vulner':82C 'web':75C 'xss.this':95C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-11T12:19:50+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L","cvss_by":"audit@patchstack.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-125680","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-125680","severity":null,"published_at":"2026-11-11T12:19:50+00:00","modified_at":"2026-11-11T12:19:50+00:00","first_seen_at":"2026-11-11T12:27:12+00:00","fetched_at":"2026-11-11T12:27:12+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}