Fastlinemedia

Beaver Builder

31 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2025-12558

  • EPSS 0.04%
  • Veröffentlicht 09.12.2025 13:51:07
  • Zuletzt bearbeitet 11.12.2025 17:44:04

The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.9.4 via the 'get_attachment_sizes' function. This makes it possible for authenticated attackers, ...

4.3

CVE-2025-12782

  • EPSS 0.04%
  • Veröffentlicht 04.12.2025 06:48:39
  • Zuletzt bearbeitet 11.12.2025 18:17:25

The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.9.4. This is due to the plugin not properly verifying a user's authorization in the disable() function. Thi...

4.3

CVE-2025-11726

  • EPSS 0.04%
  • Veröffentlicht 02.12.2025 07:24:31
  • Zuletzt bearbeitet 11.12.2025 20:27:36

The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 2.9.4. This is due to insufficient capability checks in the REST API endpoints under the 'fl-controls/v1' na...

5.4

CVE-2025-8427

  • EPSS 0.05%
  • Veröffentlicht 23.10.2025 12:32:32
  • Zuletzt bearbeitet 19.12.2025 22:15:32

The Beaver Builder Plugin (Starter Version) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘auto_play’ parameter in all versions up to, and including, 2.9.2.1 due to insufficient input sanitization and output escaping. This...

6.1

CVE-2025-8897

  • EPSS 0.11%
  • Veröffentlicht 28.08.2025 01:46:29
  • Zuletzt bearbeitet 11.12.2025 20:31:09

The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘'fl_builder' parameter in all versions up to, and including, 2.9.2.1 due to insufficient input sanitization and output escaping....

7.2

CVE-2025-4102

  • EPSS 0.42%
  • Veröffentlicht 20.06.2025 11:16:39
  • Zuletzt bearbeitet 11.07.2025 12:39:11

The Beaver Builder Plugin (Starter Version) plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'save_enabled_icons' function in all versions up to, and including, 2.9.1. This makes it possible for ...

5.4

CVE-2024-11832

  • EPSS 0.15%
  • Veröffentlicht 13.12.2024 09:15:06
  • Zuletzt bearbeitet 07.01.2025 18:12:54

The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the custom JavaScript row settings in all versions up to, and including, 2.8.4.4 due to insufficient input sanitization and output escap...

5.4

CVE-2024-53797

  • EPSS 0.11%
  • Veröffentlicht 06.12.2024 14:15:22
  • Zuletzt bearbeitet 31.01.2025 16:49:57

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in The Beaver Builder Team Beaver Builder allows Stored XSS.This issue affects Beaver Builder: from n/a through 2.8.4.3.

4.8

CVE-2024-50430

  • EPSS 0.12%
  • Veröffentlicht 19.11.2024 19:15:08
  • Zuletzt bearbeitet 31.01.2025 16:49:46

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Beaver Builder Team Beaver Builder allows Stored XSS.This issue affects Beaver Builder: from n/a through 2.8.3.7.

5.4

CVE-2024-9505

  • EPSS 0.36%
  • Veröffentlicht 29.10.2024 14:15:08
  • Zuletzt bearbeitet 31.10.2024 16:39:41

The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Button widget in all versions up to, and including, 2.8.4.2 due to insufficient input sanitization and output escaping on u...