CVE-2026-62110: WordPress Bold Page Builder plugin <= 5.9.9 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting (XSS) in Bold Page Builder <= 5.9.9 versions.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress Bold Page Builder Pluginto a version that resolves this vulnerability.Fixed in 5.9.10
Event History
Frequently Asked Questions
Who can exploit this issue?
A user with the WordPress Contributor role can exploit the XSS vulnerability. Exploitation also requires user interaction, as indicated by the UI:R vector.
Which installations are affected?
WordPress sites using the Bold Page Builder plugin version 5.9.9 or earlier are affected. The provided data does not state whether any particular default configuration or feature setting is required.
What impact can successful exploitation have?
The vulnerability can affect confidentiality, integrity, and availability, each with low impact. Its scope is changed, meaning the impact can extend beyond the vulnerable plugin's security authority.