The Beaver Builder Team

7 CVEs across 4 The Beaver Builder Team products. Browse The Beaver Builder Team vulnerabilities, severities, and proof-of-concept exploits.

The Beaver Builder Team products with known CVEs

ProductCVEs
Beaver Builder Plugin (Starter Version)3
Beaver Builder2
Beaver Builder – WordPress Page Builder1
Beaver Builder – WordPress Page Builder (WordPress Plugin)1
The Beaver Builder Team CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-18843Medium6.12026-09-05The Beaver Builder Plugin (Starter Version) plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via 'no_results_message' node_preview Paramete…
CVE-2025-8427Medium6.42025-10-23The Beaver Builder Plugin (Starter Version) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘auto_play’ parameter in all versions up…
CVE-2025-4102High7.22025-06-20The Beaver Builder Plugin (Starter Version) plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'save_enabl…
CVE-2024-43926High7.12024-08-29Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Beaver Builder Team Beaver Builder allows Refl…
CVE-2024-37500Medium6.52024-07-21Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Beaver Builder Team Beaver Builder allows Stor…
CVE-2023-50889Medium6.52023-12-29Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in The Beaver Builder Team Beaver Builder – WordPress Page B…
CVE-2022-36425Medium5.42022-09-06Broken Access Control vulnerability in Beaver Builder plugin <= 2.5.4.3 at WordPress.