CVE-2025-12558mediumCWE-200

CVE-2025-12558: falha de média gravidade em beaverbuilder Beaver Builder Page Builder…

Beaver Builder – WordPress Page Builder <= 2.9.4 - Authenticated (Contributor+) Sensitive Information Exposure

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Beaver Builder Page Builder – Drag and Drop Website Builder

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 4.3epss 0.4%
The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.9.4 via the 'get_attachment_sizes' function. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive data including the path and meta data of private attachments, which can be used to view the attachments.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Produtos afetados
beaverbuilder · Beaver Builder Page Builder – Drag and Drop Website Builder
CVEs relacionadas — beaverbuilder Beaver Builder Page Builder…

No mesmo produto, das mais perigosas para as menos.

CVE-2026-92084CRITICALBeaver Builder Page Builder <= 2.11.0.5 - Unauthenticated Arbitrary Shortcode Execution via Sidebar Module Widget OutputEPSS 0.8%CVE-2024-1038MEDIUMBeaver Builder – WordPress Page Builder <= 2.7.4.2 - Reflected (DOM-Based) Cross-Site ScriptingEPSS 0.6%CVE-2024-1074MEDIUMBeaver Builder – WordPress Page Builder <= 2.7.4.2 - Authenticated(Contributor+) Stored Cross-Site Scripting via Audio WidgetEPSS 0.5%CVE-2024-0896MEDIUMBeaver Builder – WordPress Page Builder <= 2.7.4.2 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.5%CVE-2024-4430MEDIUMBeaver Builder <= 2.8.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via photo widget crop attributeEPSS 0.5%CVE-2026-18021MEDIUMBeaver Builder Page Builder <= 2.10.3.1 - Unauthenticated Arbitrary Shortcode ExecutionEPSS 0.5%