Vulnerability in Codeless Page Builder

CVE-2026-15234

The Codeless Page Builder WordPress plugin through 1.1.4 does not sanitize or validate a shortcode attribute before using it as an HTML tag name when rendering content, allowing users with contributor-level access and above to inject arbit…

Affected products

  • Unknown Codeless Page Builder — versions 0

References