Approved changes feed: RSS · Atom

cpe:2.3:a:ultimatebeaver:ultimate_addons_for_beaver_builder:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUltimatebeaver (6fe26e32-94af-5acb-a396-c63a54d4f4bf)
ProductUltimate Addons For Beaver Builder (6419e430-4db0-5ad7-8665-be7e9e6923f3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-25763 vulnerable 2026-07-28 19:45:00.592799 WordPress Ultimate Addons for Beaver Builder 1.2.4.1 Authentication Bypass
CRITICAL (9.8)
WordPress Ultimate Addons for Beaver Builder 1.2.4.1 contains an authentication bypass vulnerability that allows attackers to gain unauthorized access by exploiting the social media login form functionality. Attackers can submit a POST request to the admin-ajax.php endpoint with the uabb-lf-google-submit action, a valid administrator email address, and a valid nonce to obtain session cookies and authenticate as that user.
Published: 2026-06-20T13:36:32.595Z
Updated: 2026-07-15T01:24:17.362Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.