CVE-2026-6172 | Boldmes Bold Page Builder Plugin up to 5.7.2 on WordPress Shortcode caption cross site scripting

September 30, 2026 Yanac

A vulnerability described as problematic has been identified in Boldmes Bold Page Builder Plugin up to 5.7.2 on WordPress. This vulnerability affects unknown code of the component Shortcode Handler. Such manipulation of the argument caption leads to cross site scripting.

This vulnerability is referenced as CVE-2026-6172. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More