CVE-2023-6695

Beaver Themer (WordPress) is associated with CVE-2023-6695 describing Sensitive Information Exposure via the wpbb shortcode in all versions up to and including 1.4.9. The vulnerability allows authenticated attackers withContributor+ access to extract sensitive data, including arbitrary user_meta ...

CVE-2021-42749

CVE-2021-42749 affects Beaver Themer (WordPress plugin). The vulnerability lets attackers bypass conditional logic controls used to hide content when viewing post archives, provided a Themer layout is applied to the archives and the post excerpt field is not set. This is a straightforward logic b...

CVE-2023-6694

Beaver Themer (WordPress plugin) contains a Stored XSS in shortcode handling for versions up to 1.4.9, exploitable by authenticated users with contributor+ permissions; the vulnerability allows injection of scripts that execute when pages are viewed. No public patch/mitigation details are provide...