Beaver Builder

9 CVEs across 3 Beaver Builder products. Browse Beaver Builder vulnerabilities, severities, and proof-of-concept exploits.

Beaver Builder products with known CVEs

ProductCVEs
Beaver Builder5
Beaver Themer2
WordPress Assistant2
Beaver Builder CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-40744High8.52026-04-15Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Beaver Builder Beaver Builder beaver-builder-lite-version…
CVE-2025-69319High7.52026-01-22Improper Control of Generation of Code ('Code Injection') vulnerability in Beaver Builder Beaver Builder beaver-builder-lite-version allows Code Injection.This…
CVE-2025-53307High7.12025-09-05Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Beaver Builder WordPress Assistant assistant allows Refle…
CVE-2025-26885High7.22025-03-03Deserialization of Untrusted Data vulnerability in Beaver Builder WordPress Assistant assistant allows Object Injection.This issue affects WordPress Assistant…
CVE-2024-53797Medium6.52024-12-06Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Beaver Builder Beaver Builder beaver-builder-lite-version…
CVE-2024-50430Medium5.92024-11-19Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Beaver Builder Beaver Builder beaver-builder-lite-version…
CVE-2023-6695Medium6.52024-04-09The Beaver Themer plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.9 via the 'wpbb' shortcode. Th…
CVE-2023-6694Medium6.42024-04-09The Beaver Themer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in all versions up to, and including, 1.4.9 d…
CVE-2024-30425Medium6.52024-03-29Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Beaver Builder Beaver Builder beaver-builder-lite-version…