Approved changes feed: RSS · Atom

cpe:2.3:a:beaver_builder:beaver_builder:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorBeaver Builder (4e9216b9-540e-50e2-8431-a6cb8c57bd32)
ProductBeaver Builder (5f0bd21a-0d3b-5705-ac66-a8d38efbc6c6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-40744 vulnerable 2026-06-08 08:01:20.942896 WordPress Beaver Builder plugin <= 2.10.1.2 - SQL Injection vulnerability
HIGH (8.5)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Beaver Builder Beaver Builder beaver-builder-lite-version allows Blind SQL Injection.This issue affects Beaver Builder: from n/a through <= 2.10.1.2.
Published: 2026-04-15T10:21:34.729Z
Updated: 2026-04-29T09:52:04.890Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-69319 vulnerable 2026-06-08 07:43:13.396880 WordPress Beaver Builder plugin <= 2.9.4.1 - Arbitrary Code Execution vulnerability
HIGH (7.5)
Improper Control of Generation of Code ('Code Injection') vulnerability in Beaver Builder Beaver Builder beaver-builder-lite-version allows Code Injection.This issue affects Beaver Builder: from n/a through <= 2.9.4.1.
Published: 2026-01-22T16:52:33.399Z
Updated: 2026-04-28T20:49:04.980Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-53797 vulnerable 2026-06-08 06:54:15.537812 WordPress Beaver Builder plugin <= 2.8.4.3 - Cross Site Scripting (XSS) vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Beaver Builder Beaver Builder beaver-builder-lite-version allows Stored XSS.This issue affects Beaver Builder: from n/a through <= 2.8.4.3.
Published: 2024-12-06T13:07:34.535Z
Updated: 2026-05-12T23:36:09.953Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-50430 vulnerable 2026-06-08 06:52:10.066470 WordPress Beaver Builder plugin <= 2.8.3.7 - Cross Site Scripting (XSS) vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Beaver Builder Beaver Builder beaver-builder-lite-version allows Stored XSS.This issue affects Beaver Builder: from n/a through <= 2.8.3.7.
Published: 2024-11-19T18:39:04.759Z
Updated: 2026-05-11T22:02:11.878Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-30425 vulnerable 2026-06-08 06:35:30.330722 WordPress Beaver Builder plugin <= 2.7.4.4 - Cross Site Scripting (XSS) vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Beaver Builder Beaver Builder beaver-builder-lite-version allows DOM-Based XSS.This issue affects Beaver Builder: from n/a through <= 2.7.4.4.
Published: 2024-03-29T13:19:15.872Z
Updated: 2026-04-28T16:09:22.962Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.