Exposure of Bootstrap

UI frameworks
58
exposure score
2,371,189
sites use
0
exploited
1
critical
Vexday analysis

Com 52 CVEs catalogadas e nenhuma em exploração ativa no catálogo CISA KEV, o Bootstrap apresenta taxa de exploração abaixo da média geral do catálogo, o que sugere menor pressão ofensiva imediata sobre essa tecnologia. O tipo de falha mais comum é CWE-79 (Cross-Site Scripting), padrão esperado em frameworks de front-end e que exige atenção contínua na validação de entradas e saídas no contexto de aplicações web. A CVE mais perigosa identificada atualmente é CVE-2021-23472, com score EPSS de 0,0233, indicando probabilidade de exploração relativamente baixa no curto prazo. O surgimento de 2 novas CVEs nos últimos 90 dias sinaliza que a superfície de ataque ainda está em evolução, recomendando monitoramento contínuo e aplicação das atualizações disponíveis.

CVEs

58 results
CVE-2026-14632MEDIUMkirilkirkov Ecommerce-CodeIgniter-Bootstrap Trusted Backend MY_Controller.php setReferrer redirectEPSS 0.3%CVE-2025-11822MEDIUMWP Bootstrap Tabs <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeEPSS 0.3%CVE-2019-25642HIGHBootstrapy CMS Lastest Multiple SQL Injection via Forum and Contact ModulesEPSS 0.3%CVE-2024-43349MEDIUMWordPress All Bootstrap Blocks plugin <= 1.3.19 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-54733MEDIUMWordPress All Bootstrap Blocks Plugin <= 1.3.28 - Broken Access Control VulnerabilityEPSS 0.2%CVE-2025-26551HIGHWordPress Bootstrap collapse plugin <= 1.0.4 - CSRF to Stored Cross-Site Scripting vulnerabilityEPSS 0.2%CVE-2024-13549MEDIUMAll Bootstrap Blocks <= 1.3.26 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.2%CVE-2025-3901MEDIUMBootstrap Site Alert - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-042EPSS 0.2%CVE-2025-27826MEDIUMAn XSS issue was discovered in the Bootstrap Lite theme before 1.x-1.4.5 for Backdrop CMS. It doesn't sufficiently sanitize certain class naEPSS 0.2%CVE-2025-27825MEDIUMAn XSS issue was discovered in the Bootstrap 5 Lite theme before 1.x-1.0.3 for Backdrop CMS. It doesn't sufficiently sanitize certain class EPSS 0.2%CVE-2023-35047MEDIUMWordPress All Bootstrap Blocks Plugin <= 1.3.6 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.2%CVE-2025-11753MEDIUMMulti-language Responsive Portfolio WordPress <= 1.0 - Authenticated (Admin+) Stored Cross-Site ScriptingEPSS 0.2%CVE-2025-8776MEDIUMEpic Bootstrap Buttons <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via icol ParameterEPSS 0.2%CVE-2025-30951MEDIUMWordPress BlockStrap Page Builder - Bootstrap Blocks plugin <= 0.1.36 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2024-0847MEDIUM5280 Bootstrap Modal Contact Form <= 1.0 - Cross-Site Request Forgery to Bulk Delete MessagesEPSS 0.2%CVE-2026-7661MEDIUMBootstrap Shortcode <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'box' ShortcodeEPSS 0.2%CVE-2025-11764MEDIUMShortcodes Bootstrap <= 1.1 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.2%CVE-2025-62095MEDIUMWordPress Bootstrap Modals plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%