Boot-Modal

Boot-Modal has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for Boot-Modal has a vendor fix available, so running the current release closes it.

All of these findings were reported by SOPROBRO. Boot-Modal is installed on roughly 80 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.7.7.

Strategic Overview

Avg CVSSMedium

6.4/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Boot-Modal vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2025-22551

Boot-Modal <= 1.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records


2025-01-07 00:00	Boot-Modal <= 1.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting Boot-Modal <= 1.9.1	`CVE-2025-22551`	6.4 Medium	SOPROBRO	Yes

Showing 1–1 of 1 reports

Latestv1.10

Boot-Modal

Author

albedo0

5.0(2)

100/100

Last Updated

2025-01-07 (2y ago)

Active Installs

80+

Downloads

6,855

Requires WP

3.0.1+

Requires PHP

Tested up to

WP 6.7.7

Created

2016-01-05 (11y ago)

This plugin use a simple shortcode to insert a link anywhere to open any page in a Bootstrap modal window. You can use a button in the editor to generate the shortcode for you or use the default settings. You can setup several params like : – Size of the modal, – Type of the button to open modal (link or button), – CSS class for buttons, – etc

View on WordPress.org