Bold Page Builder, CVE-2026-84022

CVE, Research URL: CVE-2026-84022
Home page URL: Security reports for Bold Page Builder
Application: Bold Page Builder
Published on: Sep 05, 2026
Research Description: The Bold Page Builder WordPress plugin before 5.9.8 does not sanitise and escape several shortcode attributes before outputting them in HTML attributes, allowing users with the Contributor role and above to inject arbitrary web scripts that execute when a user views the affected page.
Affected versions: max 5.9.8.
Status: vulnerable