CVE-2026-6170

CVE-2026-6170 published: The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'images' parameter of the plugin's bt_bb_css_image_grid shortcode in all versions up to, and including, 5.7.2 due to insufficient input sanitization and output e...

View full NVD advisory → ← Back to CVE watch