Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

Beaver Builder vulnerabilities

9 published CVEs name Beaver Builder among the affected products.

Published CVEs
9
Last 12 months
2
Critical
0
Known exploited
0

Critical 0High 4Medium 5Low 0Not scored 0

CVEs per yearBy the year they were published

  1. 20245
  2. 20252
  3. 20262

Newest CVEs

  • CVE-2026-40744

    WordPress Beaver Builder plugin <= 2.10.1.2 - SQL Injection vulnerability

    Beaver Builder · Beaver Builder

    High8.5
  • CVE-2025-69319

    WordPress Beaver Builder plugin <= 2.9.4.1 - Arbitrary Code Execution vulnerability

    Beaver Builder · Beaver Builder

    High7.5
  • CVE-2025-53307

    WordPress Assistant Plugin <= 1.5.2 - Cross Site Scripting (XSS) Vulnerability

    Beaver Builder · WordPress Assistant

    High7.1
  • CVE-2025-26885

    WordPress Assistant Plugin <= 1.5.1 - PHP Object Injection vulnerability

    Beaver Builder · WordPress Assistant

    High7.2
  • CVE-2024-53797

    WordPress Beaver Builder plugin <= 2.8.4.3 - Cross Site Scripting (XSS) vulnerability

    Beaver Builder · Beaver Builder

    Medium6.5
  • CVE-2024-50430

    WordPress Beaver Builder plugin <= 2.8.3.7 - Cross Site Scripting (XSS) vulnerability

    Beaver Builder · Beaver Builder

    Medium6.5
  • CVE-2023-6694

    Beaver Themer <= 1.4.9 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode

    Beaver Builder · Beaver Themer

    Medium6.4
  • CVE-2023-6695

    Beaver Themer <= 1.4.9 - Authenticated (Contributor+) Sensitive Information Exposure via shortcode

    Beaver Builder · Beaver Themer

    Medium6.5
  • CVE-2024-30425

    WordPress Beaver Builder plugin <= 2.7.4.4 - Cross Site Scripting (XSS) vulnerability

    Beaver Builder · Beaver Builder

    Medium6.5