Vulnerabilidades em beaverbuilder
23 resultadosAnálise Vexday
Beaver Builder apresenta 21 vulnerabilidades catalogadas, predominantemente relacionadas a injeção XSS (CWE-79), porém nenhuma está sendo explorada ativamente no momento. A ausência de CVEs críticos e de publicações recentes sugere que a superfície de risco atual não demanda ação imediata, embora a frequência de falhas de validação de entrada mereça atenção em ciclos regulares de revisão.
CVE-2024-7620MEDIUMCustomizer Export/Import <= 0.9.7 - Authenticated (Admin+) Arbitrary File Upload via Customization Settings ImportEPSS 0.7%CVE-2024-1038MEDIUMBeaver Builder – WordPress Page Builder <= 2.7.4.2 - Reflected (DOM-Based) Cross-Site ScriptingEPSS 0.6%CVE-2024-1074MEDIUMBeaver Builder – WordPress Page Builder <= 2.7.4.2 - Authenticated(Contributor+) Stored Cross-Site Scripting via Audio WidgetEPSS 0.5%CVE-2024-0896MEDIUMBeaver Builder – WordPress Page Builder <= 2.7.4.2 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.5%CVE-2024-4430MEDIUMBeaver Builder <= 2.8.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via photo widget crop attributeEPSS 0.5%CVE-2024-3923MEDIUMBeaver Builder – WordPress Page Builder <= 2.8.1.1 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.4%CVE-2025-12558MEDIUMBeaver Builder – WordPress Page Builder <= 2.9.4 - Authenticated (Contributor+) Sensitive Information ExposureEPSS 0.4%CVE-2024-1080MEDIUMBeaver Builder – WordPress Page Builder <= 2.7.4.4 - Authenticated(Contributor+) Stored Cross-Site Scripting via heading tagEPSS 0.4%CVE-2024-0897MEDIUMBeaver Builder – WordPress Page Builder <= 2.7.4.2 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.4%CVE-2024-2925MEDIUMBeaver Builder – WordPress Page Builder <= 2.8.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via ButtonEPSS 0.4%CVE-2024-7895MEDIUMBeaver Builder (Lite Version) <= 2.8.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via type ParameterEPSS 0.4%CVE-2024-0871MEDIUMBeaver Builder <= 2.7.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Icon WidgetEPSS 0.4%CVE-2025-12934HIGHBeaver Builder – WordPress Page Builder <= 2.9.4.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post UpdateEPSS 0.4%CVE-2024-9049MEDIUMBeaver Builder – WordPress Page Builder <= 2.8.3.6 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Button Group ModuleEPSS 0.3%CVE-2024-9505MEDIUMBeaver Builder – WordPress Page Builder <= 2.8.4.2 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Button WidgetEPSS 0.3%CVE-2025-11726MEDIUMBeaver Builder – WordPress Page Builder <= 2.9.4 - Missing Authorization to Authenticated (Contributor+) Global Preset ModificationEPSS 0.3%CVE-2026-18021MEDIUMBeaver Builder Page Builder <= 2.10.3.1 - Unauthenticated Arbitrary Shortcode ExecutionEPSS 0.3%CVE-2026-2481MEDIUMBeaver Builder Page Builder – Drag and Drop Website Builder <= 2.10.1.1 - Authenticated (Author+) Stored Cross-Site Scripting via 'settings[js]'EPSS 0.3%CVE-2025-12782MEDIUMBeaver Builder – WordPress Page Builder <= 2.9.4 - Missing Authorization to Authenticated (Contributor+) Builder Status TamperingEPSS 0.3%CVE-2024-11832MEDIUMBeaver Builder – WordPress Page Builder <= 2.8.4.4 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.2%