Lewe Bootstrap Visuals
Lewe Bootstrap Visuals has one disclosed vulnerability in the WordSec catalog, all reported in 2024; it remains unpatched as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for Lewe Bootstrap Visuals has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2024.
All of these findings were reported by SOPROBRO. Lewe Bootstrap Visuals is installed on roughly 10 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.
CVE-2024-51810Lewe Bootstrap Visuals <= 2.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records

Lewe Bootstrap Visuals
Author
George Lewe
Lewe Bootstrap Visuals is a comprehensive WordPress plugin that brings the power of Bootstrap 5 to your WordPress site through an extensive collection of shortcodes. This plugin replaces the legacy shortcode-bootstrap-visuals plugin with modern Bootstrap 5. Key Features: Bootstrap 5.3.8 – Latest Bootstrap version with modern CSS and JavaScript Prefix Support – All CSS classes use the bsv- prefix to avoid conflicts Modern WordPress Standards – Built following current WordPress Plugin Development Handbook Comprehensive Components – Alerts, badges, buttons, cards, modals, progress bars, and more Responsive Grid System – Bootstrap 5 grid with responsive breakpoints CDN Integration – Automatic loading of Bootstrap 5.3.8 from CDN Shortcode API – Simple shortcodes for all Bootstrap components using dash syntax TinyMCE Integration – Visual editor buttons for easy shortcode insertion Admin Interface – Clean settings page with component documentation Available Shortcodes: Layout Components: * [bsv-container] – Bootstrap container * [bsv-row] – Bootstrap row * [bsv-column] – Bootstrap column with responsive sizes UI Components: * [bsv-alert] – Alert messages with optional dismiss button * [bsv-badge] – Badges and labels * [bsv-button] – Buttons with various styles and sizes * [bsv-card] – Cards with headers, footers, and images * [bsv-panel] – Alias for card (backward compatibility) Content Components: * [bsv-blockquote] – Styled blockquotes * [bsv-code] – Inline and block code formatting * [bsv-highlight] – Highlighted text * [bsv-lead] – Lead paragraphs * [bsv-text] – Text with utility classes * [bsv-list] – Styled lists Interactive Components: * [bsv-modal] – Modal dialogs * [bsv-collapse] – Collapsible content * [bsv-accordion] – Accordion panels * [bsv-tooltip] – Tooltips * [bsv-popover] – Popovers Progress & Loading: * [bsv-progress] – Progress bars * [bsv-spinner] – Loading spinners Migration from Legacy Plugin: If you’re migrating from the old shortcode-bootstrap-visuals plugin, most shortcodes work with the new dash syntax ([bsv-alert] instead of [bsv_alert]). The plugin maintains backward compatibility where possible while following modern WordPress shortcode conventions. Support For support, documentation, and feature requests, please visit: Plugin Documentation WordPress Support Forum Lewe Service Desk Credits Based on Bootstrap Follows WordPress Coding Standards
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C