TB
Vendor
The Beaver Builder Team
7
CVEs
0
On KEV
0
New 30D
Products
BB7.2
Beaver Builder Plugin (Starter Version)
The Beaver Builder Team
3 CVEs0 on KEV0 new
BB6.1
Beaver Builder
The Beaver Builder Team
2 CVEs0 on KEV0 new
BB5.4
Beaver Builder – WordPress Page Builder
The Beaver Builder Team
1 CVEs0 on KEV0 new
CE6.6
Cutomizer Export/import
The Beaver Builder Team
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-18843 | BB Beaver Builder Plugin (Starter Version) The Beaver Builder Team | 6.1 | Sep 5 | Beaver Builder Plugin (Pro Version) <= 2.11.0.1 - Reflected Cross-Site Scripting via 'no_results_message' node_preview Parameter |
| CVE-2025-8427 | BB Beaver Builder Plugin (Starter Version) The Beaver Builder Team | 5.4 | Oct 23 | Beaver Builder Plugin (Starter Version) <= 2.9.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'auto_play' |
| CVE-2025-4102 | BB Beaver Builder Plugin (Starter Version) The Beaver Builder Team | 7.2 | Jun 20 | Beaver Builder Plugin (Starter Version) <= 2.9.1 - Authenticated (Administrator+) Arbitrary File Upload |
| CVE-2024-7620 | CE Cutomizer Export\/import The Beaver Builder Team | 6.6 | Sep 7 | Customizer Export/Import <= 0.9.7 - Authenticated (Admin+) Arbitrary File Upload via Customization Settings Import |
| CVE-2024-43926 | BB Beaver Builder The Beaver Builder Team | 6.1 | Aug 29 | WordPress Beaver Builder plugin <= 2.8.3.2 - Reflected Cross Site Scripting (XSS) vulnerability |
| CVE-2024-37500 | BB Beaver Builder The Beaver Builder Team | 5.4 | Jul 21 | WordPress Beaver Builder plugin <= 2.8.2.2 - Cross Site Scripting (XSS) vulnerability |
| CVE-2023-50889 | BB Beaver Builder – WordPress Page Builder The Beaver Builder Team | 5.4 | Dec 29 | WordPress Beaver Builder Plugin <= 2.7.2 is vulnerable to Cross Site Scripting (XSS) |