Skip to content
OpenAdvisories

Vendor

Beaver Builder

9 known vulnerabilities.

Products

Beaver Builder 5 WordPress Assistant 2 Beaver Themer 2
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 8.5
    CVE-2026-40744

    WordPress Beaver Builder plugin <= 2.10.1.2 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Beaver Builder Beaver Builder beaver-builder-lite-version allows Blind SQL Injection.This issue affects Beaver Builder: from n/a through <= 2.10.1.2.

    Beaver Builder Beaver Builder
  • High 7.5
    CVE-2025-69319

    WordPress Beaver Builder plugin <= 2.9.4.1 - Arbitrary Code Execution vulnerability

    Improper Control of Generation of Code ('Code Injection') vulnerability in Beaver Builder Beaver Builder beaver-builder-lite-version allows Code Injection.This issue affects Beaver Builder: from n/a through <= 2.9.4.1.

    Beaver Builder Beaver Builder
  • High 7.1
    CVE-2025-53307

    WordPress Assistant Plugin <= 1.5.2 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Beaver Builder WordPress Assistant assistant allows Reflected XSS.This issue affects WordPress Assistant: from n/a through <= 1.5.2.

    Beaver Builder WordPress Assistant Web / CMS
  • High 7.2
    CVE-2025-26885

    WordPress Assistant Plugin <= 1.5.1 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in Beaver Builder WordPress Assistant assistant allows Object Injection.This issue affects WordPress Assistant: from n/a through <= 1.5.1.

    Beaver Builder WordPress Assistant Web / CMS