Approved changes feed: RSS · Atom

cpe:2.3:a:ideabox:powerpack_for_beaver_builder:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

VendorIdeabox (d1b50318-758d-54fd-99d5-6975a63fa0f5)
ProductPowerpack For Beaver Builder (2067ea14-a9cc-59f4-9bdd-0c9eaf63da0d)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/helloideabox/powerpack-lite-beaver-builder purl2cpe 2026-06-01 10:16:58.361366

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-37410 vulnerable 2026-06-08 06:39:47.509574 WordPress PowerPack Lite for Beaver Builder plugin <= 1.3.0.3 - Local File Inclusion vulnerability
MEDIUM (4.9)
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in IdeaBox Creations PowerPack Lite for Beaver Builder powerpack-addon-for-beaver-builder.This issue affects PowerPack Lite for Beaver Builder: from n/a through <= 1.3.0.3.
Published: 2024-07-09T10:13:44.999Z
Updated: 2026-04-28T16:09:58.342Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-37409 vulnerable 2026-06-08 06:39:47.508790 WordPress PowerPack Lite for Beaver Builder plugin <= 1.3.0.4 - Cross Site Scripting (XSS) vulnerability
MEDIUM (5.9)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in IdeaBox Creations PowerPack Lite for Beaver Builder powerpack-addon-for-beaver-builder.This issue affects PowerPack Lite for Beaver Builder: from n/a through <= 1.3.0.4.
Published: 2024-07-22T08:40:40.127Z
Updated: 2026-04-28T16:09:58.481Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-0176 vulnerable 2026-06-08 05:39:09.406289 PowerPack Lite for Beaver Builder < 1.2.9.3 - Reflected Cross-Site Scripting
The PowerPack Lite for Beaver Builder WordPress plugin before 1.2.9.3 does not sanitise and escape the tab parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting
Published: 2022-02-14T09:20:56.000Z
Updated: 2024-08-02T23:18:41.933Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.