CVE-2022-0176

PowerPack Lite for Beaver Builder WordPress plugin (versions before 1.2.9.3) is affected by a reflected Cross‑Site Scripting (XSS) due to failure to sanitize and escape the tab parameter before outputting it on an admin page. Root cause: improper handling of the tab parameter leads to injected Ja...

CVE-2024-2289

PowerPack Lite for Beaver Builder (WordPress plugin) is vulnerable to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping on user-supplied attributes. The issue affects all versions up to 1.3.0 and can allow authenticated attackers with contributor-level and abo...

CVE-2024-37410

CVE-2024-37410 affects Beaver Addons PowerPack Lite for Beaver Builder (PowerPack Lite for Beaver Builder) versions up to and including 1.3.0.3. The connected PT-security listing specifies an Authenticated (Editor+) Local File Inclusion vulnerability, indicating exploitation requires authenticate...

CVE-2024-43330

CVE-2024-43330 concerns PowerPack for Beaver Builder. It is a Reflected Cross-Site Scripting vulnerability in PowerPack for Beaver Builder (IdeaBox Creations) that affects versions up to 2.37.3 (and before 2.37.4). The root cause is improper input neutralization during web page generation, enabli...

CVE-2024-37409

CVE-2024-37409 is a stored XSS in Beaver Addons PowerPack Lite for Beaver Builder. The Red Hat/NVD entries and Wordfence detail confirm: affected software is PowerPack Lite for Beaver Builder, version 1.3.0.4 and earlier; root cause is improper neutralization of input during web page generation. ...

CVE-2024-12239

CVE-2024-12239 (PowerPack Lite for Beaver Builder, WordPress) is a Reflected Cross-Site Scripting flaw in the navigate parameter, affecting all versions up to 1.3.0.5. It allows unauthenticated attackers to inject scripts that run when an admin user interacts with a crafted link. The Red Hat entr...