WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
beaver-builder-lite-version
Published
2024-08-28
Title
Beaver Builder (Lite Version) < 2.8.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via type Parameter
Slug
beaver-builder-lite-version
Published
2024-08-26
Title
Beaver Builder < 2.8.3.4 - Reflected Cross-Site Scripting
Slug
beaver-builder-lite-version
Published
2024-09-26
Title
Beaver Builder – WordPress Page Builder < 2.8.3.7 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Button Group Module
Slug
beaver-builder-lite-version
Published
2024-10-29
Title
Beaver Builder – WordPress Page Builder < 2.8.4.3 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Button Widget
Slug
beaver-builder-lite-version
Published
2024-10-24
Title
Beaver Builder < 2.8.3.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
beaver-builder-lite-version
Published
2024-12-02
Title
Beaver Builder < 2.8.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
beaver-builder-lite-version
Published
2024-12-12
Title
Beaver Builder – WordPress Page Builder < 2.8.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
beaver-builder-lite-version
Published
2025-08-27
Title
Beaver Builder Plugin (Lite Version) < 2.9.3.1 - Reflected Cross-Site Scripting
Slug
beaver-builder-lite-version
Published
2025-12-01
Title
Beaver Builder – WordPress Page Builder < 2.9.4.1 - Missing Authorization to Authenticated (Contributor+) Global Preset Modification
Slug
beaver-builder-lite-version
Published
2025-12-03
Title
Beaver Builder – WordPress Page Builder < 2.9.4.1 - Missing Authorization to Authenticated (Contributor+) Builder Status Tampering
Slug
beaver-builder-lite-version
Published
2025-12-08
Title
Beaver Builder – WordPress Page Builder < 2.9.4.1 - Authenticated (Contributor+) Sensitive Information Exposure
Slug
beaver-builder-lite-version
Published
2025-12-22
Title
Beaver Builder – WordPress Page Builder < 2.9.4.2 - Subscriber+ Arbitrary Beaver Builder Post Update
Slug
beaver-builder-lite-version
Published
2026-01-21
Title
Beaver Builder < 2.9.4.2 - Contributor+ Remote Code Execution
Slug
beaver-builder-lite-version
Published
2026-02-10
Title
Beaver Builder Page Builder – Drag and Drop Website Builder < 2.10.0.6 - Authenticated (Custom+) Missing Authorization to Stored Cross-Site Scripting via Global Settings
Slug
beaver-themer
Published
2024-04-03
Title
Beaver Themer < 1.4.9.1 - Authenticated (Contributor+) Sensitive Information Exposure via shortcode
Slug
beaver-themer
Published
2024-04-06
Title
Beaver Themer < 1.4.9.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode
Slug
bebetter-social-icons
Published
2024-11-08
Title
BeBetter Social Icons <= 2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
becustom
Published
2022-11-14
Title
Becustom < 1.0.5.3 - Settings Update via CSRF
Slug
beds24-online-booking
Published
2024-01-08
Title
Beds24 Online Booking < 2.0.25 - Contributor+ Stored XSS
Slug
beds24-online-booking
Published
2024-01-31
Title
Beds24 Online Booking < 2.0.24 - Authenticated(Administrator+) Stored Cross-Site Scripting
Slug
beds24-online-booking
Published
2024-11-01
Title
Beds24 Online Booking < 2.0.26 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
beds24-online-booking
Published
2024-11-20
Title
Beds24 Online Booking < 2.0.28 - Contributor+ Stored XSS via beds24-link Shortcode
Slug
beds24-online-booking
Published
2025-04-04
Title
Beds24 Online Booking < 2.0.29 - Contributor+ Local File Inclusion
Slug
beds24-online-booking
Published
2025-04-01
Title
Beds24 Online Booking < 2.0.28 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
beds24-online-booking
Published
2025-05-07
Title
Beds24 Online Booking < 2.0.30 - Authenticated (Contributor+) Stored Cross-Site Scripting