CVE-2026-15234 – Codeless Page Builder

CVE ID :CVE-2026-15234

Published : Aug. 1, 2026, 7:16 a.m. | 33 minutes ago

Description :The Codeless Page Builder WordPress plugin through 1.1.4 does not sanitize or validate a shortcode attribute before using it as an HTML tag name when rendering content, allowing users with contributor-level access and above to inject arbitrary HTML and JavaScript that executes in the session of any higher-privileged user (such as an administrator) who views the content.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…