Read the docs

beaverbuilder

Records51All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high10CVSS 7.0–8.9

Exploited now

beaverbuilder records in CISA KEV

No beaverbuilder vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Beaver Builder 31 records MEDIUM Beaver Themer 3 records LOW Customizer Export/import 3 records HIGH Assistant 1 record HIGH

Records

1 record in Assistant · all components

TI-2023-05334 CVE-2023-5798 · GHSA-5j4q-6j8c-67m6

Assistant < 1.4.4 - Editor+ SSRF

Priority HIGH 73

The Assistant WordPress plugin before 1.4.4 does not validate a parameter before making a request to it via wp_remote_get(), which could allow users with a role as low as Editor to perform SSRF attacks

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00873 Published 2023-10-26 Fixed in 1.4.4
Open these records in search →