beaverbuilder

Records51All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high10CVSS 7.0–8.9

Exploited now

beaverbuilder records in CISA KEV

No beaverbuilder vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Beaver Builder 31 records MEDIUM Beaver Themer 3 records LOW Customizer Export/import 3 records HIGH Assistant 1 record HIGH

Records

3 records in Beaver Themer · all components

TI-2023-06123 CVE-2023-6695 · GHSA-7pcc-7cq6-8v3x

Beaver Themer <= 1.4.9 - Authenticated (Contributor+) Sensitive Information Exposure via shortcode

LOW 29

The Beaver Themer plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.9 via the 'wpbb' shortcode.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00521 Published 2024-04-09 No fix listed CWE-359

TI-2023-06122 CVE-2023-6694 · GHSA-9265-rqwh-6m4g

Beaver Themer <= 1.4.9 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode

LOW 28

The Beaver Themer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in all versions up to, and including, 1.4.9 due to insufficient input sanitization and output escaping on…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00331 Published 2024-04-09 No fix listed CWE-79

TI-2021-18953 CVE-2021-42749 · GHSA-h5m9-c2h6-x3rp

In Beaver Themer, attackers can bypass conditional logic controls (for hiding content)…

LOW 26

In Beaver Themer, attackers can bypass conditional logic controls (for hiding content) when viewing the post archives.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01106 Published 2022-01-07 No fix listed CWE-668

Open these records in search →

Critical	2
High	10
Medium	39
Low	0
No CVSS	0