Beaver Builder
Beaver Builder
Developer
2.10.0.6
Latest version
100,000
Installations
No date
Last updated
Vulnerability history
0 present
31 fixed
6 Mitigation rules
- WordPress Beaver Builder Page Builder - Drag and Drop Website Builder plugin <= 2.10.0.5 - Authenticated (Custom+) Missing Authorization to Stored Cross-Site Scripting via Global Settings vulnerability<= 2.10.0.51 day ago
- Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability<= 2.7.4.2Feb 3, 2026
- Arbitrary Code Execution vulnerability<= 2.9.4.1Jan 21, 2026
- Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Update vulnerability<= 2.9.4.1Dec 23, 2025
- Authenticated (Contributor+) Sensitive Information Exposure vulnerability<= 2.9.4Dec 9, 2025
- Missing Authorization to Authenticated (Contributor+) Builder Status Tampering vulnerability<= 2.9.4Dec 4, 2025
- Missing Authorization to Authenticated (Contributor+) Global Preset Modification vulnerability<= 2.9.4Dec 1, 2025
- Reflected Cross-Site Scripting vulnerability<= 2.9.2.1Aug 27, 2025
- Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability<= 2.8.4.4Dec 12, 2024
- Cross Site Scripting (XSS) vulnerability<= 2.8.4.3Dec 2, 2024
- Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Button Widget vulnerability<= 2.8.4.2Oct 29, 2024
- Cross Site Scripting (XSS) vulnerability<= 2.8.3.7Oct 24, 2024
- Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Button Group Module vulnerability<= 2.8.3.6Sep 27, 2024
- Authenticated (Contributor+) Stored Cross-Site Scripting via type Parameter vulnerability<= 2.8.3.5Aug 29, 2024
- Reflected Cross Site Scripting (XSS) vulnerability<= 2.8.3.2Aug 26, 2024
- Cross Site Scripting (XSS) vulnerability<= 2.8.2.2Jul 4, 2024
- Authenticated (Contributor+) Stored Cross-Site Scripting via photo widget crop attribute vulnerability<= 2.8.1.2May 10, 2024
- Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability<= 2.8.1.1May 7, 2024
- Authenticated (Contributor+) Stored Cross-Site Scripting via Button vulnerability<= 2.8.0.5Apr 2, 2024
- Cross Site Scripting (XSS) vulnerability<= 2.7.4.4Mar 28, 2024
- Authenticated(Contributor+) Stored Cross-Site Scripting via heading tag vulnerability<= 2.7.4.4Mar 12, 2024
- Authenticated(Contributor+) Stored Cross-Site Scripting via Audio Widget vulnerability<= 2.7.4.2Feb 28, 2024
- Authenticated (Contributor+) Stored Cross-Site Scripting via Icon Widget vulnerability<= 2.7.4.2Feb 21, 2024
- Reflected (DOM-Based) Cross-Site Scripting vulnerability<= 2.7.4.2Feb 21, 2024
- Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability<= 2.7.4.2Feb 21, 2024
- Cross Site Scripting (XSS) vulnerability<= 2.7.2Dec 26, 2023
- Authenticated Stored Cross-Site Scripting (XSS) vulnerability via Caption On Hover<= 2.5.5.2Aug 30, 2022
- Authenticated Stored Cross-Site Scripting (XSS) vulnerability via caption<= 2.5.5.2Aug 30, 2022
- Authenticated Stored Cross-Site Scripting (XSS) vulnerability via Image URL<= 2.5.5.2Aug 29, 2022
- Authenticated Stored Cross-Site Scripting (XSS) vulnerability via Text Editor<= 2.5.5.2Aug 29, 2022
- Broken Access Control vulnerability<= 2.5.4.3Jul 20, 2022