Bootstrap Modals
Bootstrap Modals has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for Bootstrap Modals has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.
All of these findings were reported by Muhammad Yudha - DJ. Bootstrap Modals is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 5.2.26.
CVE-2025-62095Bootstrap Modals <= 1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records

Bootstrap Modals
Author
neilgee
This plugin adds Bootstrap v3 Modal functionality to WordPress. It adds just the Bootstrap Javascript Plugin for Modals and associated CSS. This does not bring in any other Bootstrap javascript or CSS functionality. There is sample HTML mark up code in the readme.txt for a selector and modal target element. Options to override the default CSS modal styling and also use a shortcode. Option to disable Bootstrap JS/CSS files in case of conflict. Usage Use either the Bootstrap API markup or Javascript to trigger the modal windows, this can be found here: http://getbootstrap.com/javascript/#modals There is also further usage information here: http://coolestguidesontheplanet.com/bootstrap/modal.php Mark up needs to be directly applied to post/page or widget area or via a shortcode. Options to override the default CSS styling. Here is a simple HTML Modal MarkUp <!-- Button trigger modal --> <a class="btn btn-primary btn-lg" href="#myModal1" data-toggle="modal">Launch demo modal</a> <!-- Modal --> <div id="myModal1" class="modal fade" tabindex="-1"> <div class="modal-dialog"> <div class="modal-content"> <div class="modal-header"> <button class="close" type="button" data-dismiss="modal">×</button> <h4 class="modal-title">My Title in a Modal Window</h4> </div> <div class="modal-body">This is the body of a modal...</div> <div class="modal-footer">This is the footer of a modal...</div> </div><!-- /.modal-content --> </div><!-- /.modal-dialog --> </div><!-- /.modal --> You can change the modal size by adding an extra CSS class to the .modal-dialog div; modal-lg or modal-sm for large and small respectively. Since version 1.0.2 extra CSS is included to set the close button to a state similar to Bootstrap install, to override the default CSS for the close button use a CSS selector .modal-dialog .close { } in your CSS styles.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C