CVE-2026-2448 | gpriday Page Builder by SiteOrigin Plugin up to 2.33.5 on WordPress locate_template file inclusion

A vulnerability has been found in gpriday Page Builder by SiteOrigin Plugin up to 2.33.5 on WordPress and classified as critical. Affected by this issue is the function locate_template. Performing a manipulation results in file inclusion.

This vulnerability was named CVE-2026-2448. The attack may be initiated remotely. There is no available exploit.