B
Vendor security profile
bolt
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs5
Critical1
CISA KEV0
Public exploit3
Patch rate%20
Avg. CVSS8.6
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
1
0
0
CVE KEV
CVE severity distribution
5toplam CVE
Critical1 (20%)
High4 (80%)
Patch and exploitation view
%20
Verified patch
%0
CISA KEV
%60
Public exploit
1Patch available
0Partial
0Workaround
0Vendor: no patch
4Unknown
Latest vulnerabilities
7.5
CVE-2026-32472
WordPress Online Contact Widget plugin <= 1.3.0 - Broken Access Control vulnerability
W
Patch status unknownEPSS %0
10.0
CVE-2026-65553
WordPress Spider Analyser – WordPress搜索引擎蜘蛛分析插件 plugin <= 2.1.3 - Remote Code Execution (RCE) vulnerability
W
Patch status unknownEPSS %1
8.8
CVE-2026-71291
Bolt CMS Server-Side Template Injection via Unsandboxed allow_twig Field Rendering
B
Patch status unknownEPSS %1
7.5
CVE-2025-34086
Bolt CMS Authenticated Remote Code Execution via Profile Injection and File Rename
B
Patch verifiedEPSS %4
8.8
CVE-2022-36532
Vulnerability in Bolt Cms
B
Patch status unknownEPSS %24
9.1
CVE-2022-31321
Improper input validation in Boltcms
B
Patch status unknownEPSS %1
8.8
CVE-2021-40219
Code injection in Bolt Cms
B
Patch status unknownEPSS %3