UA
Product
Ultimate Addons For Beaver Builder
9
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 8Low 0
Watch
Add Ultimate Addons For Beaver Builder to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-51398 | 8.8 | May 17 | WordPress Ultimate Addons for Beaver Builder Premium plugin <= 1.35.14 - Privilege Escalation vulnerability Affected: before 1.35.15 |
| CVE-2023-51401 | 6.5 | May 17 | WordPress Ultimate Addons for Beaver Builder Premium plugin <= 1.35.13 - Limited Arbitrary File Download vulnerability Affected: before 1.35.14 |
| CVE-2024-43151 | 5.4 | Aug 12 | WordPress Ultimate Addons for Beaver Builder – Lite plugin <= 1.5.9 - Cross Site Scripting (XSS) vulnerability Affected: before 1.5.10 |
| CVE-2024-2140 | 5.4 | Mar 30 | Ultimate Addons for Beaver Builder – Lite <= 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Advanced Icons Widget Affected: before 1.5.8 |
| CVE-2024-2142 | 5.4 | Mar 30 | Ultimate Addons for Beaver Builder – Lite <= 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Info Table Widget Affected: before 1.5.8 |
| CVE-2024-2141 | 5.4 | Mar 30 | Ultimate Addons for Beaver Builder – Lite <= 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Widget Affected: before 1.5.8 |
| CVE-2024-2144 | 5.4 | Mar 30 | Ultimate Addons for Beaver Builder – Lite <= 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Separator Widget Affected: before 1.5.8 |
| CVE-2024-2143 | 5.4 | Mar 30 | Ultimate Addons for Beaver Builder – Lite <= 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Heading Widget Affected: before 1.5.8 |
| CVE-2023-23882 | 4.3 | Jan 17 | WordPress Ultimate Addons for Beaver Builder – Lite Plugin <= 1.5.5 is vulnerable to Broken Access Control Affected: through 1.5.5 |
Showing 9