Skip to content
Beaverbuilder vulnerabilities
Newest
-
beaverbuilder beaver builder page builder – drag and drop website builder
Beaver Builder Page Builder <= 2.11.0.5 - Unauthenticated Arbitrary Shortcode Execution via Sidebar Module Widget Output
CVE-2026-92084
Public exploit
9.1 Critical
-
beaverbuilder beaver builder page builder – drag and drop website builder
Beaver Builder Page Builder <= 2.11.0.5 - Authenticated (Contributor+) SQL Injection via 'fields[][value]' Parameter
CVE-2026-95865
6.5 Medium
-
beaverbuilder beaver builder page builder – drag and drop website builder
Beaver Builder Page Builder <= 2.10.3.1 - Unauthenticated Arbitrary Shortcode Execution
CVE-2026-18021
6.5 Medium
-
beaverbuilder beaver builder page builder – drag and drop website builder
Beaver Builder Page Builder <= 2.10.2.2 - Authenticated (Author+) Stored Cross-Site Scripting via Button Module 'button' Parameter
CVE-2026-17090
6.4 Medium
-
beaverbuilder beaver builder page builder – drag and drop website builder
Beaver Builder Page Builder – Drag and Drop Website Builder <= 2.10.1.1 - Authenticated (Author+) Stored Cross-Site Scripting via 'settings[js]'
CVE-2026-2481
6.4 Medium
-
beaverbuilder beaver builder page builder – drag and drop website builder
Beaver Builder Page Builder – Drag and Drop Website Builder <= 2.10.0.5 - Authenticated (Custom+) Missing Authorization to Stored Cross-Site Scripting via Global Settings
CVE-2026-1231
6.4 Medium
-
beaverbuilder beaver builder page builder – drag and drop website builder
Beaver Builder – WordPress Page Builder <= 2.9.4.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Update
CVE-2025-12934
8.1 High
-
fastlinemedia beaver builder, beaverbuilder beaver builder page builder – drag and drop website builder +1 more
Beaver Builder – WordPress Page Builder <= 2.9.4 - Authenticated (Contributor+) Sensitive Information Exposure
CVE-2025-12558
4.3 Medium
-
fastlinemedia beaver builder, beaverbuilder beaver builder page builder – drag and drop website builder +1 more
Beaver Builder – WordPress Page Builder <= 2.9.4 - Missing Authorization to Authenticated (Contributor+) Builder Status Tampering
CVE-2025-12782
4.3 Medium
-
fastlinemedia beaver builder, beaverbuilder beaver builder page builder – drag and drop website builder +1 more
Beaver Builder – WordPress Page Builder <= 2.9.4 - Missing Authorization to Authenticated (Contributor+) Global Preset Modification
CVE-2025-11726
4.3 Medium
-
fastlinemedia beaver builder, beaverbuilder beaver builder page builder – drag and drop website builder +1 more
Beaver Builder Plugin (Lite Version) <= 2.9.2.1 - Reflected Cross-Site Scripting
CVE-2025-8897
6.1 Medium
-
fastlinemedia beaver builder, beaverbuilder beaver builder page builder – drag and drop website builder +1 more
Beaver Builder – WordPress Page Builder <= 2.8.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-11832
6.4 Medium
-
fastlinemedia beaver builder, beaverbuilder beaver builder page builder – drag and drop website builder +1 more
Beaver Builder – WordPress Page Builder <= 2.8.4.2 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Button Widget
CVE-2024-9505
6.4 Medium
-
fastlinemedia beaver builder, beaverbuilder beaver builder page builder – drag and drop website builder +1 more
Beaver Builder – WordPress Page Builder <= 2.8.3.6 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Button Group Module
CVE-2024-9049
6.4 Medium
-
beaverbuilder customizer export/import, fastlinemedia customizer export\/import, the beaver builder team cutomizer export\/import +2 more
Customizer Export/Import <= 0.9.7 - Authenticated (Admin+) Arbitrary File Upload via Customization Settings Import
CVE-2024-7620
6.6 Medium
-
fastlinemedia beaver builder, beaverbuilder beaver builder page builder – drag and drop website builder +1 more
Beaver Builder (Lite Version) <= 2.8.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via type Parameter
CVE-2024-7895
6.4 Medium
-
fastlinemedia beaver builder, beaverbuilder beaver builder page builder – drag and drop website builder +1 more
Beaver Builder <= 2.8.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via photo widget crop attribute
CVE-2024-4430
6.4 Medium
-
fastlinemedia beaver builder, beaverbuilder beaver builder page builder – drag and drop website builder +1 more
Beaver Builder – WordPress Page Builder <= 2.8.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-3923
6.4 Medium
-
fastlinemedia beaver builder, beaverbuilder beaver builder page builder – drag and drop website builder +1 more
Beaver Builder – WordPress Page Builder <= 2.8.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button
CVE-2024-2925
6.4 Medium
-
fastlinemedia beaver builder, beaverbuilder beaver builder page builder – drag and drop website builder +1 more
Beaver Builder – WordPress Page Builder <= 2.7.4.2 - Reflected (DOM-Based) Cross-Site Scripting
CVE-2024-1038
5.4 Medium
-
fastlinemedia beaver builder, beaverbuilder beaver builder page builder – drag and drop website builder +1 more
Beaver Builder – WordPress Page Builder <= 2.7.4.4 - Authenticated(Contributor+) Stored Cross-Site Scripting via heading tag
CVE-2024-1080
6.4 Medium
-
fastlinemedia beaver builder, beaverbuilder beaver builder page builder – drag and drop website builder +1 more
Beaver Builder – WordPress Page Builder <= 2.7.4.2 - Authenticated(Contributor+) Stored Cross-Site Scripting via Audio Widget
CVE-2024-1074
6.4 Medium
-
fastlinemedia beaver builder, beaverbuilder beaver builder page builder – drag and drop website builder +1 more
Beaver Builder – WordPress Page Builder <= 2.7.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-0896
6.4 Medium
-
fastlinemedia beaver builder, beaverbuilder beaver builder page builder – drag and drop website builder +1 more
Beaver Builder <= 2.7.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Icon Widget
CVE-2024-0871
5.4 Medium
-
fastlinemedia beaver builder, beaverbuilder beaver builder page builder – drag and drop website builder +1 more
Beaver Builder – WordPress Page Builder <= 2.7.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-0897
6.4 Medium