The Bold Page Builder plugin for WordPress has a security issue that allows hackers to inject harmful web scripts into pages. This can happen if a user with Contributor-level access or higher adds code into the ‘additional_settings’ section. This can be dangerous for anyone who visits the page where the code is injected.