CVE-2026-1231: Improper Neutralization of Input During Web Page Generation

The Beaver Builder Page Builder – Drag and Drop Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the js Global Settings parameter in all versions up to, and including, 2.10.0.5 due to missing capability checks on saveglobalsettings function and insufficient...

CVE-2024-8427

CVE-2024-8427 affects the WordPress plugin Frontend Post Submission Manager Lite – Frontend Posting WordPress Plugin (

CVE-2024-8427: Missing Authorization

The Frontend Post Submission Manager Lite – Frontend Posting WordPress Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the saveglobalsettings and processformedit functions in all versions up to, and including, 1.2.2. This makes i...