Browse all 9 CVE security advisories affecting Beaver Builder. AI-powered Chinese analysis, POCs, and references for each vulnerability.
Beaver Builder is a WordPress page builder plugin enabling drag-and-drop website creation. Historically, it has faced multiple security vulnerabilities including remote code execution (RCE), cross-site scripting (XSS), and privilege escalation flaws. The plugin has accumulated 9 CVE records to date, with several critical RCE vulnerabilities allowing attackers to execute arbitrary code on affected servers. Security researchers have identified consistent issues in input validation and access control mechanisms. While Beaver Builder remains popular among WordPress users, its security track record demonstrates the importance of regular updates and proper hardening for any WordPress installation utilizing this plugin.
This page lists every published CVE security advisory associated with Beaver Builder. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.