The Beaver Builder Team Beaver Builder Plugin (Starter Version)
3 CVEs affecting The Beaver Builder Team Beaver Builder Plugin (Starter Version). Latest disclosed: 2026-09-05. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-4102 | High | 7.2 | 2025-06-20 | The Beaver Builder Plugin (Starter Version) plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'save_enabl… |
CVE-2025-8427 | Medium | 6.4 | 2025-10-23 | The Beaver Builder Plugin (Starter Version) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘auto_play’ parameter in all versions up… |
CVE-2026-18843 | Medium | 6.1 | 2026-09-05 | The Beaver Builder Plugin (Starter Version) plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via 'no_results_message' node_preview Paramete… |