Skip to content
OpenAdvisories
High · 7.5 CVE-2025-69319 EUVD-2026-3900GHSA-32qq-wr5q-gh7c

WordPress Beaver Builder plugin <= 2.9.4.1 - Arbitrary Code Execution vulnerability

Published Jan 22, 2026 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Control of Generation of Code ('Code Injection') vulnerability in Beaver Builder Beaver Builder beaver-builder-lite-version allows Code Injection.This issue affects Beaver Builder: from n/a through <= 2.9.4.1.

Affected products

VendorProductAffectedFixed
Beaver Builder Beaver Builder ≤ 2.9.4.1 —

References