WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
beaver-builder-lite-version
Published
2024-05-10
Title
Beaver Builder < 2.8.1.3 - Contributor+ Stored Cross-Site Scripting via photo widget crop attribute
Slug
beaver-builder-lite-version
Published
2024-07-04
Title
Beaver Builder < 2.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
beaver-builder-lite-version
Published
2024-08-28
Title
Beaver Builder (Lite Version) < 2.8.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via type Parameter
Slug
beaver-builder-lite-version
Published
2024-08-26
Title
Beaver Builder < 2.8.3.4 - Reflected Cross-Site Scripting
Slug
beaver-builder-lite-version
Published
2024-09-26
Title
Beaver Builder – WordPress Page Builder < 2.8.3.7 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Button Group Module
Slug
beaver-builder-lite-version
Published
2024-10-29
Title
Beaver Builder – WordPress Page Builder < 2.8.4.3 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Button Widget
Slug
beaver-builder-lite-version
Published
2024-10-24
Title
Beaver Builder < 2.8.3.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
beaver-builder-lite-version
Published
2024-12-02
Title
Beaver Builder < 2.8.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
beaver-builder-lite-version
Published
2024-12-12
Title
Beaver Builder – WordPress Page Builder < 2.8.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
beaver-builder-lite-version
Published
2025-08-27
Title
Beaver Builder Plugin (Lite Version) < 2.9.3.1 - Reflected Cross-Site Scripting
Slug
beaver-builder-lite-version
Published
2025-12-01
Title
Beaver Builder – WordPress Page Builder < 2.9.4.1 - Missing Authorization to Authenticated (Contributor+) Global Preset Modification
Slug
beaver-builder-lite-version
Published
2025-12-03
Title
Beaver Builder – WordPress Page Builder < 2.9.4.1 - Missing Authorization to Authenticated (Contributor+) Builder Status Tampering
Slug
beaver-builder-lite-version
Published
2025-12-08
Title
Beaver Builder – WordPress Page Builder < 2.9.4.1 - Authenticated (Contributor+) Sensitive Information Exposure
Slug
beaver-builder-lite-version
Published
2025-12-22
Title
Beaver Builder – WordPress Page Builder < 2.9.4.2 - Subscriber+ Arbitrary Beaver Builder Post Update
Slug
beaver-builder-lite-version
Published
2026-01-21
Title
Beaver Builder < 2.9.4.2 - Contributor+ Remote Code Execution
Slug
beaver-builder-lite-version
Published
2026-02-10
Title
Beaver Builder Page Builder – Drag and Drop Website Builder < 2.10.0.6 - Authenticated (Custom+) Missing Authorization to Stored Cross-Site Scripting via Global Settings
Slug
beaver-builder-lite-version
Published
2026-04-07
Title
Beaver Builder Page Builder – Drag and Drop Website Builder < 2.10.1.2 - Authenticated (Author+) Stored Cross-Site Scripting via 'settings[js]'
Slug
beaver-builder-lite-version
Published
2026-03-23
Title
Beaver Builder < 2.10.1.5 - Authenticated (Contributor+) SQL Injection
Slug
beaver-builder-lite-version
Published
2026-08-14
Title
Beaver Builder Page Builder < 2.10.3.2 - Authenticated (Author+) Stored Cross-Site Scripting via Button Module 'button' Parameter
Slug
beaver-builder-lite-version
Published
2026-09-07
Title
Beaver Builder Page Builder < 2.10.3.2 - Unauthenticated Arbitrary Shortcode Execution
Slug
beaver-builder-lite-version
Published
2026-10-02
Title
Beaver Builder Page Builder < 2.11.0.6 - Authenticated (Contributor+) SQL Injection via 'fields[][value]' Parameter
Slug
beaver-builder-lite-version
Published
2026-10-02
Title
Beaver Builder Page Builder < 2.11.0.6 - Unauthenticated Arbitrary Shortcode Execution via Sidebar Module Widget Output
Slug
beaver-themer
Published
2024-04-03
Title
Beaver Themer < 1.4.9.1 - Authenticated (Contributor+) Sensitive Information Exposure via shortcode
Slug
beaver-themer
Published
2024-04-06
Title
Beaver Themer < 1.4.9.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode
Slug
bebetter-social-icons
Published
2024-11-08
Title
BeBetter Social Icons <= 2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting