CVE-2026-15234 | Codeless Page Builder Plugin up to 1.1.4 on WordPress Shortcode cross site scripting

A vulnerability classified as problematic has been found in Codeless Page Builder Plugin up to 1.1.4 on WordPress. This affects an unknown function of the component Shortcode Handler. This manipulation causes cross site scripting.

This vulnerability is registered as CVE-2026-15234. Remote exploitation of the attack is possible. No exploit is available.