Vulnerability index

Browse CVEs

34 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Beaver Builder MEDIUM 5.4
CVE-2025-8427

The Beaver Builder Plugin (Starter Version) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘auto_play’ parameter in all ve…

Fix: 2.9.3.1+
Fix from $1,600 2025-10-23
Beaver Builder MEDIUM 6.1
CVE-2025-8897

The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘'fl_builder' parameter in a…

Fix: after 2.9.2.1
Fix from $1,600 2025-08-28
Beaver Builder HIGH 7.2
CVE-2025-4102

The Beaver Builder Plugin (Starter Version) plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the '…

Fix: 2.9.1.1+
Fix from $1,950 2025-06-20
Beaver Builder MEDIUM 5.4
CVE-2024-11832

The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the custom JavaScript row settings …

Fix: 2.8.5.3+
Fix from $1,600 2024-12-13
Beaver Builder MEDIUM 5.4
CVE-2024-53797

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Beaver Builder Beaver Builder beaver-builder-li…

Fix: 2.8.4.4+
Fix from $1,600 2024-12-06
Beaver Builder MEDIUM 5.4
CVE-2024-9505

The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Button widget in all v…

Fix: 2.8.4.3+
Fix from $1,600 2024-10-29
Beaver Builder MEDIUM 5.4
CVE-2024-9049

The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Button Group module in…

Fix: 2.8.3.7+
Fix from $1,600 2024-09-27
Customizer Export\/import MEDIUM 6.6
CVE-2024-7620

The Customizer Export/Import plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the '_import' functi…

Fix: 0.9.7.1+
Fix from $1,600 2024-09-07
Beaver Builder MEDIUM 6.1
CVE-2024-43926

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Beaver Builder Team Beaver Builder a…

Fix: 2.8.3.4+
Fix from $1,600 2024-08-29
Beaver Builder MEDIUM 5.4
CVE-2024-7895

The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘type’ parameter in all version…

Fix: 2.8.3.6+
Fix from $1,600 2024-08-29
Beaver Builder MEDIUM 5.4
CVE-2024-37500

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Beaver Builder Team Beaver Builder a…

Fix: 2.8.3+
Fix from $1,600 2024-07-21
Beaver Builder MEDIUM 5.4
CVE-2024-4430

The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the photo widget crop attribute in …

Fix: 2.8.1.3+
Fix from $1,600 2024-05-14
Beaver Builder MEDIUM 5.4
CVE-2024-3923

The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the link_target parameter in all ve…

Fix: after 2.8.1.2
Fix from $1,600 2024-05-14
Beaver Themer MEDIUM 6.5
CVE-2023-6695

The Beaver Themer plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.9 via the 'wpbb' sho…

Fix: 1.4.9.1+
Fix from $1,600 2024-04-09
Beaver Themer MEDIUM 5.4
CVE-2023-6694

The Beaver Themer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in all versions up to, and includin…

Fix: 1.4.9.1+
Fix from $1,600 2024-04-09
Beaver Builder MEDIUM 5.4
CVE-2024-2925

The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Button Widget in all v…

Fix: 2.8.0.7+
Fix from $1,600 2024-04-02
Beaver Builder MEDIUM 5.4
CVE-2024-30425

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Beaver Builder Beaver Builder beaver-builder-li…

Fix: 2.7.4.5+
Fix from $1,600 2024-03-29
Beaver Builder MEDIUM 6.1
CVE-2024-1038

The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to DOM-Based Reflected Cross-Site Scripting via a 'playground.wordpres…

Fix: 2.7.4.3+
Fix from $1,600 2024-03-13
Beaver Builder MEDIUM 5.4
CVE-2024-1074

The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the audio widget 'link_url' paramet…

Fix: 2.7.4.3+
Fix from $1,600 2024-03-13
Beaver Builder MEDIUM 5.4
CVE-2024-1080

The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the via the heading tag in all vers…

Fix: 2.7.4.5+
Fix from $1,600 2024-03-13
Beaver Builder MEDIUM 5.4
CVE-2024-0897

The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the image URL parameter in all vers…

Fix: 2.7.4.3+
Fix from $1,600 2024-03-13
Beaver Builder MEDIUM 5.4
CVE-2024-0871

The Beaver Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Icon Widget 'fl_builder_data[node_preview][link]' and 'f…

Fix: 2.7.4.3+
Fix from $1,600 2024-03-13
Beaver Builder MEDIUM 5.4
CVE-2024-0896

The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the button link parameter in all ve…

Fix: 2.7.4.3+
Fix from $1,600 2024-03-13
Beaver Builder MEDIUM 5.4
CVE-2023-50889

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in The Beaver Builder Team Beaver Builder – WordPr…

Fix: after 2.7.2
Fix from $1,600 2023-12-29
Assistant HIGH 8.8
CVE-2023-5798

The Assistant WordPress plugin before 1.4.4 does not validate a parameter before making a request to it via wp_remote_get(), which could allow users …

Fix: 1.4.4+
Fix from $1,950 2023-10-26
Customizer Export\/import HIGH 7.2
CVE-2023-1347EPSS 16%

The Customizer Export/Import WordPress plugin before 0.9.6 unserializes user input provided via the settings, which could allow high privilege users …

Fix: 0.9.6+
Fix from $1,950 2023-05-08
Customizer Export\/import HIGH 7.2
CVE-2022-3380

The Customizer Export/Import WordPress plugin before 0.9.5 unserializes the content of an imported file, which could lead to PHP object injection iss…

Fix: 0.9.5+
Fix from $1,950 2022-10-31
Beaver Builder CRITICAL 9.8
CVE-2022-36425

Broken Access Control vulnerability in Beaver Builder plugin <= 2.5.4.3 at WordPress.

Fix: after 2.5.4.3
Fix from $2,300 2022-09-06
Beaver Builder MEDIUM 5.4
CVE-2022-2517

The Beaver Builder – WordPress Page Builder for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Caption - On Hover' value associated …

Fix: after 2.5.5.2
Fix from $1,600 2022-09-06
Beaver Builder MEDIUM 5.4
CVE-2022-2695

The Beaver Builder – WordPress Page Builder for WordPress is vulnerable to Stored Cross-Site Scripting via the 'caption' parameter added to images vi…

Fix: after 2.5.5.2
Fix from $1,600 2022-09-06