BoldThemes vulnerabilities
We track 13 vulnerabilities in BoldThemes products across 13 products. 13 are rated high or critical, and none are known to be exploited. The most recent was published on March 5, 2026.
Latest BoldThemes vulnerabilities
- 8.1 High severity
Celeste: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in BoldThemes Celeste celeste allows Object Injection.This issue affects Celeste: from n/a through <= 1.3.6.
- 9.8 Critical severity
Ippsum: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in BoldThemes Ippsum ippsum allows Object Injection.This issue affects Ippsum: from n/a through <= 1.2.0.
- 9.8 Critical severity
Travelicious: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in BoldThemes Travelicious travelicious allows Object Injection.This issue affects Travelicious: from n/a through < 1.6.7.
- 9.8 Critical severity
Nestin: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in BoldThemes Nestin nestin allows Object Injection.This issue affects Nestin: from n/a through < 1.2.6.
- 9.8 Critical severity
Codiqa: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in BoldThemes Codiqa codiqa allows Object Injection.This issue affects Codiqa: from n/a through < 1.2.8.
- 9.8 Critical severity
DentiCare: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in BoldThemes DentiCare denticare allows Object Injection.This issue affects DentiCare: from n/a through < 1.4.3.
- 9.8 Critical severity
Addison: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in BoldThemes Addison addison allows Object Injection.This issue affects Addison: from n/a through < 1.4.8.
- 9.8 Critical severity
Goldenblatt: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in BoldThemes Goldenblatt goldenblatt allows Object Injection.This issue affects Goldenblatt: from n/a through < 1.3.0.
- 9.8 Critical severity
Amwerk: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in BoldThemes Amwerk amwerk allows Object Injection.This issue affects Amwerk: from n/a through <= 1.2.0.
- 9.8 Critical severity
Medicare: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in BoldThemes Medicare medicare allows Object Injection.This issue affects Medicare: from n/a through <= 2.1.0.
- 9.8 Critical severity
Avantage: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in BoldThemes Avantage avantage allows Object Injection.This issue affects Avantage: from n/a through <= 2.4.9.
- 8.8 High severity
Bold Page Builder: Missing Authorization
Missing Authorization vulnerability in boldthemes Bold Page Builder bold-page-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bold Page Builder: from n/a through <= 5.1.3.
- 7.1 High severity
ReConstruction: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BoldThemes ReConstruction reconstruction allows Reflected XSS.This issue affects ReConstruction: from n/a through <= 1.4.7.