Vulnerabilities > CVE-2021-24579 - Deserialization of Untrusted Data vulnerability in Bold-Themes Bold Page Builder

CVSS 6.5 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

SINGLE

Confidentiality impact

PARTIAL

Integrity impact

PARTIAL

Availability impact

PARTIAL

network

low complexity

bold-themes

CWE-502

NVD

Published: 2021-08-30

Updated: 2021-09-02

Summary

The bt_bb_get_grid AJAX action of the Bold Page Builder WordPress plugin before 3.1.6 passes user input into the unserialize() function without any validation or sanitisation, which could lead to a PHP Object Injection. Even though the plugin did not contain a suitable gadget to fully exploit the issue, other installed plugins on the blog could allow such issue to be exploited and lead to RCE in some cases.

Vulnerable Configurations

Part	Description	Count
Application	Bold-Themes Bold Themes Bold Page Builder - Bold Themes Bold Page Builder 1.0.0 Bold Themes Bold Page Builder 1.0.1 Bold Themes Bold Page Builder 1.0.2 Bold Themes Bold Page Builder 1.0.3 Bold Themes Bold Page Builder 1.0.4 Bold Themes Bold Page Builder 1.0.5 Bold Themes Bold Page Builder 1.0.6 Bold Themes Bold Page Builder 1.0.7 Bold Themes Bold Page Builder 1.0.8 Bold Themes Bold Page Builder 1.0.9 Bold Themes Bold Page Builder 1.1.0 Bold Themes Bold Page Builder 1.1.1 Bold Themes Bold Page Builder 1.1.2 Bold Themes Bold Page Builder 1.1.3 Bold Themes Bold Page Builder 1.1.4 Bold Themes Bold Page Builder 1.1.5 Bold Themes Bold Page Builder 1.1.6 Bold Themes Bold Page Builder 1.1.7 Bold Themes Bold Page Builder 1.1.8 Bold Themes Bold Page Builder 1.1.9 Bold Themes Bold Page Builder 1.2.0 Bold Themes Bold Page Builder 1.2.1 Bold Themes Bold Page Builder 1.2.2 Bold Themes Bold Page Builder 1.2.3 Bold Themes Bold Page Builder 1.2.4 Bold Themes Bold Page Builder 1.2.5 Bold Themes Bold Page Builder 1.2.6 Bold Themes Bold Page Builder 1.2.7 Bold Themes Bold Page Builder 1.2.8 Bold Themes Bold Page Builder 1.2.9 Bold Themes Bold Page Builder 1.3.0 Bold Themes Bold Page Builder 1.3.1 Bold Themes Bold Page Builder 1.3.2 Bold Themes Bold Page Builder 1.3.3 Bold Themes Bold Page Builder 1.3.4 Bold Themes Bold Page Builder 1.3.5 Bold Themes Bold Page Builder 1.3.6 Bold Themes Bold Page Builder 1.3.7 Bold Themes Bold Page Builder 1.3.8 Bold Themes Bold Page Builder 1.3.9 Bold Themes Bold Page Builder 1.4.0 Bold Themes Bold Page Builder 1.4.1 Bold Themes Bold Page Builder 1.4.2 Bold Themes Bold Page Builder 1.4.3 Bold Themes Bold Page Builder 1.4.4 Bold Themes Bold Page Builder 1.4.5 Bold Themes Bold Page Builder 1.4.6 Bold Themes Bold Page Builder 1.4.7 Bold Themes Bold Page Builder 1.4.8 Bold Themes Bold Page Builder 1.4.9 Bold Themes Bold Page Builder 1.5.0 Bold Themes Bold Page Builder 1.5.1 Bold Themes Bold Page Builder 1.5.2 Bold Themes Bold Page Builder 1.5.3 Bold Themes Bold Page Builder 1.5.4 Bold Themes Bold Page Builder 1.5.5 Bold Themes Bold Page Builder 1.5.6 Bold Themes Bold Page Builder 1.5.7 Bold Themes Bold Page Builder 1.5.8 Bold Themes Bold Page Builder 1.5.9 Bold Themes Bold Page Builder 1.6.0 Bold Themes Bold Page Builder 1.6.1 Bold Themes Bold Page Builder 1.6.2 Bold Themes Bold Page Builder 1.6.3 Bold Themes Bold Page Builder 1.6.4 Bold Themes Bold Page Builder 1.6.5 Bold Themes Bold Page Builder 1.6.6 Bold Themes Bold Page Builder 1.6.7 Bold Themes Bold Page Builder 1.6.8 Bold Themes Bold Page Builder 1.6.9 Bold Themes Bold Page Builder 1.7.0 Bold Themes Bold Page Builder 1.7.1 Bold Themes Bold Page Builder 1.7.2 Bold Themes Bold Page Builder 1.7.3 Bold Themes Bold Page Builder 1.7.4 Bold Themes Bold Page Builder 1.7.5 Bold Themes Bold Page Builder 1.7.6 Bold Themes Bold Page Builder 1.7.7 Bold Themes Bold Page Builder 1.7.8 Bold Themes Bold Page Builder 1.7.9 Bold Themes Bold Page Builder 1.8.0 Bold Themes Bold Page Builder 1.8.1 Bold Themes Bold Page Builder 1.8.2 Bold Themes Bold Page Builder 1.8.3 Bold Themes Bold Page Builder 1.8.4 Bold Themes Bold Page Builder 1.8.5 Bold Themes Bold Page Builder 1.8.6 Bold Themes Bold Page Builder 1.8.7 Bold Themes Bold Page Builder 1.8.8 Bold Themes Bold Page Builder 1.8.9 Bold Themes Bold Page Builder 1.9.0 Bold Themes Bold Page Builder 1.9.1 Bold Themes Bold Page Builder 1.9.2 Bold Themes Bold Page Builder 1.9.3 Bold Themes Bold Page Builder 1.9.4 Bold Themes Bold Page Builder 1.9.5 Bold Themes Bold Page Builder 1.9.6 Bold Themes Bold Page Builder 1.9.7 Bold Themes Bold Page Builder 1.9.8 Bold Themes Bold Page Builder 1.9.9 Bold Themes Bold Page Builder 2.0.0 Bold Themes Bold Page Builder 2.0.1 Bold Themes Bold Page Builder 2.0.2 Bold Themes Bold Page Builder 2.0.3 Bold Themes Bold Page Builder 2.0.4 Bold Themes Bold Page Builder 2.0.5 Bold Themes Bold Page Builder 2.0.6 Bold Themes Bold Page Builder 2.0.7 Bold Themes Bold Page Builder 2.0.8 Bold Themes Bold Page Builder 2.0.9 Bold Themes Bold Page Builder 2.1.0 Bold Themes Bold Page Builder 2.1.1 Bold Themes Bold Page Builder 2.1.2 Bold Themes Bold Page Builder 2.1.3 Bold Themes Bold Page Builder 2.1.4 Bold Themes Bold Page Builder 2.1.5 Bold Themes Bold Page Builder 2.1.6 Bold Themes Bold Page Builder 2.1.7 Bold Themes Bold Page Builder 2.1.8 Bold Themes Bold Page Builder 2.1.9 Bold Themes Bold Page Builder 2.2.0 Bold Themes Bold Page Builder 2.2.1 Bold Themes Bold Page Builder 2.2.2 Bold Themes Bold Page Builder 2.2.3 Bold Themes Bold Page Builder 2.2.4 Bold Themes Bold Page Builder 2.2.5 Bold Themes Bold Page Builder 2.2.6 Bold Themes Bold Page Builder 2.2.7 Bold Themes Bold Page Builder 2.2.8 Bold Themes Bold Page Builder 2.2.9 Bold Themes Bold Page Builder 2.3.0 Bold Themes Bold Page Builder 2.3.1 Bold Themes Bold Page Builder 2.3.2 Bold Themes Bold Page Builder 2.3.3 Bold Themes Bold Page Builder 2.3.4 Bold Themes Bold Page Builder 2.3.5 Bold Themes Bold Page Builder 2.3.6 Bold Themes Bold Page Builder 2.3.7 Bold Themes Bold Page Builder 2.3.8 Bold Themes Bold Page Builder 2.3.9 Bold Themes Bold Page Builder 2.4.0 Bold Themes Bold Page Builder 2.4.1 Bold Themes Bold Page Builder 2.4.2 Bold Themes Bold Page Builder 2.4.3 Bold Themes Bold Page Builder 2.4.4 Bold Themes Bold Page Builder 2.4.5 Bold Themes Bold Page Builder 2.4.6 Bold Themes Bold Page Builder 2.4.7 Bold Themes Bold Page Builder 2.4.8 Bold Themes Bold Page Builder 2.4.9 Bold Themes Bold Page Builder 2.5.0 Bold Themes Bold Page Builder 2.5.1 Bold Themes Bold Page Builder 2.5.2 Bold Themes Bold Page Builder 2.5.3 Bold Themes Bold Page Builder 2.5.4 Bold Themes Bold Page Builder 2.5.5 Bold Themes Bold Page Builder 2.5.6 Bold Themes Bold Page Builder 2.5.7 Bold Themes Bold Page Builder 2.5.8 Bold Themes Bold Page Builder 2.5.9 Bold Themes Bold Page Builder 2.6.0 Bold Themes Bold Page Builder 2.6.1 Bold Themes Bold Page Builder 2.6.2 Bold Themes Bold Page Builder 2.6.3 Bold Themes Bold Page Builder 2.6.4 Bold Themes Bold Page Builder 2.6.5 Bold Themes Bold Page Builder 2.6.6 Bold Themes Bold Page Builder 2.6.7 Bold Themes Bold Page Builder 2.6.8 Bold Themes Bold Page Builder 2.6.9 Bold Themes Bold Page Builder 2.7.0 Bold Themes Bold Page Builder 2.7.1 Bold Themes Bold Page Builder 2.7.2 Bold Themes Bold Page Builder 2.7.3 Bold Themes Bold Page Builder 2.7.4 Bold Themes Bold Page Builder 2.7.5 Bold Themes Bold Page Builder 2.7.6 Bold Themes Bold Page Builder 2.7.7 Bold Themes Bold Page Builder 2.7.8 Bold Themes Bold Page Builder 2.7.9 Bold Themes Bold Page Builder 2.8.0 Bold Themes Bold Page Builder 2.8.1 Bold Themes Bold Page Builder 3.0.0 Bold Themes Bold Page Builder 3.0.1 Bold Themes Bold Page Builder 3.0.2 Bold Themes Bold Page Builder 3.0.3 Bold Themes Bold Page Builder 3.0.4 Bold Themes Bold Page Builder 3.0.5 Bold Themes Bold Page Builder 3.0.6 Bold Themes Bold Page Builder 3.0.7 Bold Themes Bold Page Builder 3.0.8 Bold Themes Bold Page Builder 3.0.9 Bold Themes Bold Page Builder 3.1.0 Bold Themes Bold Page Builder 3.1.1 Bold Themes Bold Page Builder 3.1.2 Bold Themes Bold Page Builder 3.1.3 Bold Themes Bold Page Builder 3.1.4 Bold Themes Bold Page Builder 3.1.5	199

Common Weakness Enumeration (CWE)

CWE-502 - Deserialization of Untrusted Data

References

https://wpscan.com/vulnerability/08edce3f-2746-4886-8439-76e44ec76fa8