beaverbuilder vulnerabilities

CVEs per yearBy the year they were published

1. 202414
2. 20255
3. 20266

Newest CVEs

• CVE-2026-92084

  Beaver Builder Page Builder <= 2.11.0.5 - Unauthenticated Arbitrary Shortcode Execution via Sidebar Module Widget Output

  beaverbuilder · Beaver Builder Page Builder – Drag and Drop Website Builder

  Critical9.1
• CVE-2026-95865

  Beaver Builder Page Builder <= 2.11.0.5 - Authenticated (Contributor+) SQL Injection via 'fields[][value]' Parameter

  beaverbuilder · Beaver Builder Page Builder – Drag and Drop Website Builder

  Medium6.5
• CVE-2026-18021

  Beaver Builder Page Builder <= 2.10.3.1 - Unauthenticated Arbitrary Shortcode Execution

  beaverbuilder · Beaver Builder Page Builder – Drag and Drop Website Builder

  Medium6.5
• CVE-2026-17090

  Beaver Builder Page Builder <= 2.10.2.2 - Authenticated (Author+) Stored Cross-Site Scripting via Button Module 'button' Parameter

  beaverbuilder · Beaver Builder Page Builder – Drag and Drop Website Builder

  Medium6.4
• CVE-2026-2481

  Beaver Builder Page Builder – Drag and Drop Website Builder <= 2.10.1.1 - Authenticated (Author+) Stored Cross-Site Scripting via 'settings[js]'

  beaverbuilder · Beaver Builder Page Builder – Drag and Drop Website Builder

  Medium6.4
• CVE-2026-1231

  Beaver Builder Page Builder – Drag and Drop Website Builder <= 2.10.0.5 - Authenticated (Custom+) Missing Authorization to Stored Cross-Site Scripting via Global Settings

  beaverbuilder · Beaver Builder Page Builder – Drag and Drop Website Builder

  Medium6.4
• CVE-2025-12934

  Beaver Builder – WordPress Page Builder <= 2.9.4.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Update

  beaverbuilder · Beaver Builder Page Builder – Drag and Drop Website Builder

  High8.1
• CVE-2025-12558

  Beaver Builder – WordPress Page Builder <= 2.9.4 - Authenticated (Contributor+) Sensitive Information Exposure

  beaverbuilder · Beaver Builder Page Builder – Drag and Drop Website Builder

  Medium4.3
• CVE-2025-12782

  Beaver Builder – WordPress Page Builder <= 2.9.4 - Missing Authorization to Authenticated (Contributor+) Builder Status Tampering

  beaverbuilder · Beaver Builder Page Builder – Drag and Drop Website Builder

  Medium4.3
• CVE-2025-11726

  Beaver Builder – WordPress Page Builder <= 2.9.4 - Missing Authorization to Authenticated (Contributor+) Global Preset Modification

  beaverbuilder · Beaver Builder Page Builder – Drag and Drop Website Builder

  Medium4.3