Lucene search
+L

7 matches found

EUVD
EUVD
added 2026/09/17 1:24 p.m.4 views

EUVD-2026-81500

Contributor Cross Site Scripting XSS in JetElements For Elementor = 2.9.2.1 versions...

6.5CVSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/10/23 10:09 p.m.16 views

WordPress Beaver Builder Plugin (Starter Version) plugin <= 2.9.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'auto_play' vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via 'autoplay' vulnerability discovered by Sulabh Jain pentestmonkey11 in WordPress Plugin Beaver Builder Plugin Starter Version versions = 2.9.2.1...

6.4CVSS5.8AI score0.00163EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2025/10/23 1:15 p.m.15 views

CVE-2025-8427

The Beaver Builder Plugin Starter Version plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘autoplay’ parameter in all versions up to, and including, 2.9.2.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, wi...

5.4CVSS5.9AI score0.00163EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/10/23 12:32 p.m.7 views

CVE-2025-8427 Beaver Builder Plugin (Starter Version) <= 2.9.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'auto_play'

The Beaver Builder Plugin Starter Version plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘autoplay’ parameter in all versions up to, and including, 2.9.2.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, wi...

6.4CVSS4.7AI score0.00163EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/10/23 12:00 a.m.12 views

PT-2025-43511

Name of the Vulnerable Software and Affected Versions Beaver Builder Plugin Starter Version versions through 2.9.2.1 Description The Beaver Builder Plugin Starter Version for WordPress is susceptible to Stored Cross-Site Scripting through the auto play parameter. Insufficient input sanitization a...

6.4CVSS5.3AI score0.00163EPSS
SaveExploits0References9
NVD
NVD
added 2025/08/28 3:15 a.m.14 views

CVE-2025-8897

The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘'flbuilder' parameter in all versions up to, and including, 2.9.2.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...

6.1CVSS0.0022EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2025/08/27 11:25 p.m.14 views

WordPress Beaver Builder plugin <= 2.9.2.1 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by Jack Pas Dark. in WordPress Plugin Beaver Builder versions = 2.9.2.1...

6.1CVSS6.1AI score0.0022EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder