Skip to content
OpenAdvisories

Vendor

The Beaver Builder Team

7 known vulnerabilities.

Products

Beaver Builder Plugin (Starter Version) 3 Beaver Builder 2 Beaver Builder – WordPress Page Builder (WordPress plugin) 1 Beaver Builder – WordPress Page Builder 1
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 6.1
    CVE-2026-18843

    Beaver Builder Plugin (Pro Version) <= 2.11.0.1 - Reflected Cross-Site Scripting via 'no_results_message' node_preview Parameter

    The Beaver Builder Plugin (Starter Version) plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via 'no_results_message' node_preview Parameter in all versions up to, and including, 2.11.0.1 due to insufficient input sanitization and output e…

    The Beaver Builder Team Beaver Builder Plugin (Starter Version) Web / CMS
  • Medium 6.4
    CVE-2025-8427

    Beaver Builder Plugin (Starter Version) <= 2.9.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'auto_play'

    The Beaver Builder Plugin (Starter Version) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘auto_play’ parameter in all versions up to, and including, 2.9.2.1 due to insufficient input sanitization and output escaping. This makes it…

    The Beaver Builder Team Beaver Builder Plugin (Starter Version) Web / CMS
  • Medium 6.5
    CVE-2024-37500

    WordPress Beaver Builder plugin <= 2.8.2.2 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Beaver Builder Team Beaver Builder allows Stored XSS.This issue affects Beaver Builder: from n/a through 2.8.2.2.

    The Beaver Builder Team Beaver Builder
  • Medium 6.5
    CVE-2023-50889

    WordPress Beaver Builder Plugin <= 2.7.2 is vulnerable to Cross Site Scripting (XSS)

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in The Beaver Builder Team Beaver Builder – WordPress Page Builder allows Stored XSS.This issue affects Beaver Builder – WordPress Page Builder: from n/a throug…

    The Beaver Builder Team Beaver Builder – WordPress Page Builder Web / CMS
  • Medium 5.4
    CVE-2022-36425

    WordPress Beaver Builder plugin <= 2.5.4.3 - Broken Access Control vulnerability

    Broken Access Control vulnerability in Beaver Builder plugin <= 2.5.4.3 at WordPress.

    The Beaver Builder Team Beaver Builder – WordPress Page Builder (WordPress plugin) Web / CMS