CVE-2025-8427

The Beaver Builder Plugin Starter Version plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘autoplay’ parameter in all versions up to, and including, 2.9.2.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, wi...

CVE-2025-8427

Beaver Builder Plugin (Starter Version) for WordPress (

PT-2025-43511

Name of the Vulnerable Software and Affected Versions Beaver Builder Plugin Starter Version versions through 2.9.2.1 Description The Beaver Builder Plugin Starter Version for WordPress is susceptible to Stored Cross-Site Scripting through the auto play parameter. Insufficient input sanitization a...

CVE-2019-10707

MKCMS V5.0 has SQL injection via the bplay.php play parameter...

Sql injection

MKCMS V5.0 has SQL injection via the bplay.php play parameter...

CVE-2019-10707

MKCMS V5.0 has SQL injection via the bplay.php play parameter...

CVE-2019-10707: Improper Neutralization of Special Elements used in an SQL Command

MKCMS V5.0 has SQL injection via the bplay.php play parameter...