The Bold Page Builder plugin for WordPress has a security issue that could allow hackers to insert harmful code into web pages. This can happen when someone with contributor or higher permissions uses the plugin’s shortcode(s). The vulnerability is present in all versions up to and including 4.8.0 because the plugin does not properly filter user input. This means that if a user visits a page with the injected code, it will run automatically.