Bootstrap Modals

Bootstrap Modals has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for Bootstrap Modals has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.

All of these findings were reported by Muhammad Yudha - DJ. Bootstrap Modals is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 5.2.26.

Strategic Overview

Avg CVSSMedium
6.4/ 10
Patch Coverage0%
Open

1

Fixed

0

Get automatic notifications for all Bootstrap Modals vulnerabilities before they are exploited.

Most severe open issueCVSS 6.4CVE-2025-62095

Bootstrap Modals <= 1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records
Bootstrap Modals banner
Latestv1.3.2

Bootstrap Modals

neilgee

Author

neilgee

4.5(8)
90/100
Last Updated
2019-05-17 (7y ago)
Active Installs
1,000+
Downloads
44,082
Requires WP
3.8+
Requires PHP
0+
Tested up to
WP 5.2.26
Created
2014-06-18 (12y ago)

This plugin adds Bootstrap v3 Modal functionality to WordPress. It adds just the Bootstrap Javascript Plugin for Modals and associated CSS. This does not bring in any other Bootstrap javascript or CSS functionality. There is sample HTML mark up code in the readme.txt for a selector and modal target element. Options to override the default CSS modal styling and also use a shortcode. Option to disable Bootstrap JS/CSS files in case of conflict. Usage Use either the Bootstrap API markup or Javascript to trigger the modal windows, this can be found here: http://getbootstrap.com/javascript/#modals There is also further usage information here: http://coolestguidesontheplanet.com/bootstrap/modal.php Mark up needs to be directly applied to post/page or widget area or via a shortcode. Options to override the default CSS styling. Here is a simple HTML Modal MarkUp <!-- Button trigger modal --> <a class="btn btn-primary btn-lg" href="#myModal1" data-toggle="modal">Launch demo modal</a> <!-- Modal --> <div id="myModal1" class="modal fade" tabindex="-1"> <div class="modal-dialog"> <div class="modal-content"> <div class="modal-header"> <button class="close" type="button" data-dismiss="modal">×</button> <h4 class="modal-title">My Title in a Modal Window</h4> </div> <div class="modal-body">This is the body of a modal...</div> <div class="modal-footer">This is the footer of a modal...</div> </div><!-- /.modal-content --> </div><!-- /.modal-dialog --> </div><!-- /.modal --> You can change the modal size by adding an extra CSS class to the .modal-dialog div; modal-lg or modal-sm for large and small respectively. Since version 1.0.2 extra CSS is included to set the close button to a state similar to Bootstrap install, to override the default CSS for the close button use a CSS selector .modal-dialog .close { } in your CSS styles.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C