CVE-2025-48232

CVE-2025-48232 describes a Stored XSS vulnerability in Xpro Addons For Beaver Builder – Lite. Connected sources specify that the issue affects Xpro Addons For Beaver Builder – Lite versions up to and including 1.5.5, caused by improper input neutralization during web page generation. The CVE is d...

PT-2025-21946 · Unknown · Xpro Addons For Beaver Builder – Lite

Name of the Vulnerable Software and Affected Versions: Xpro Addons For Beaver Builder – Lite versions 1.5.5 and earlier Description: The issue affects the Xpro Addons For Beaver Builder – Lite, allowing Stored XSS due to improper neutralization of input during web page generation. Recommendations...

WordPress plugin Xpro Addons For Beaver Builder Lite 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

PT-2025-18786 · Beaver Builder Team +2 · Beaver Builder Plugin +2

Name of the Vulnerable Software and Affected Versions: Beaver Builder Plugin Starter Version versions prior to 2.9.1 Description: The Beaver Builder Plugin Starter Version for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the save enabled icons function...

CVE-2024-43330

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in IdeaBox Creations PowerPack for Beaver Builder allows Reflected XSS.This issue affects PowerPack for Beaver Builder: from n/a before 2.37.4...

CVE-2024-43926

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Beaver Builder Team Beaver Builder allows Reflected XSS.This issue affects Beaver Builder: from n/a through 2.8.3.2...

CVE-2024-39633

Improper Privilege Management vulnerability in IdeaBox PowerPack for Beaver Builder allows Privilege Escalation.This issue affects PowerPack for Beaver Builder: from n/a through 2.33.0...

CVE-2024-12239

The PowerPack Lite for Beaver Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the navigate parameter in all versions up to, and including, 1.3.0.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...

CVE-2024-12239 PowerPack Lite for Beaver Builder <= 1.3.0.5 - Reflected Cross-Site Scripting via Navigate Parameter

The PowerPack Lite for Beaver Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the navigate parameter in all versions up to, and including, 1.3.0.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...

CVE-2024-12239

CVE-2024-12239 (PowerPack Lite for Beaver Builder, WordPress) is a Reflected Cross-Site Scripting flaw in the navigate parameter, affecting all versions up to 1.3.0.5. It allows unauthenticated attackers to inject scripts that run when an admin user interacts with a crafted link. The Red Hat entr...

PT-2024-17505 · WordPress · Powerpack Lite For Beaver Builder

Name of the Vulnerable Software and Affected Versions: PowerPack Lite for Beaver Builder plugin for WordPress versions up to, and including, 1.3.0.5 Description: The issue is a Reflected Cross-Site Scripting vulnerability due to insufficient input sanitization and output escaping. This allows...

WordPress plugin PowerPack Lite for Beaver Builder 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

WordPress PowerPack Lite for Beaver Builder plugin <= 1.3.0.5 - Reflected Cross-Site Scripting via Navigate Parameter vulnerability

Reflected Cross-Site Scripting via Navigate Parameter vulnerability discovered by Le Ngoc Anh in WordPress Plugin PowerPack Lite for Beaver Builder versions = 1.3.0.5...

CVE-2024-11832

The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the custom JavaScript row settings in all versions up to, and including, 2.8.4.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

CVE-2024-11832

The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the custom JavaScript row settings in all versions up to, and including, 2.8.4.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

CVE-2024-11832 Beaver Builder – WordPress Page Builder <= 2.8.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the custom JavaScript row settings in all versions up to, and including, 2.8.4.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

CVE-2024-11832

CVE-2024-11832 affects Beaver Builder – WordPress Page Builder (WordPress plugin). The vulnerability is a Stored Cross-Site Scripting (XSS) via the custom JavaScript row settings, caused by insufficient input sanitization and output escaping in all versions up to 2.8.4.4. It requires authenticati...

CVE-2024-11832 Beaver Builder – WordPress Page Builder <= 2.8.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the custom JavaScript row settings in all versions up to, and including, 2.8.4.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

WordPress plugin Beaver Builder – WordPress Page Builder 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin Beaver...

PT-2024-17279 · WordPress · Beaver Builder

Name of the Vulnerable Software and Affected Versions: Beaver Builder – WordPress Page Builder plugin for WordPress versions up to, and including, 2.8.4.4 Description: The issue is related to Stored Cross-Site Scripting via the custom JavaScript row settings due to insufficient input sanitization...