Beaver Builder

Products

ProductCVEsExploitedLatest
Beaver Builder5–Apr 15, 2026
Beaver Themer2–Apr 9, 2024
WordPress Assistant2–Sep 5, 2025

Exploited and recent CVEs

  • CVE-2026-40744 High 8.5 WordPress Beaver Builder plugin <= 2.10.1.2 - SQL Injection vulnerability 0.2%
  • CVE-2025-69319 High 7.5 WordPress Beaver Builder plugin <= 2.9.4.1 - Arbitrary Code Execution vulnerability 0.3%
  • CVE-2025-53307 High 7.1 WordPress Assistant Plugin <= 1.5.2 - Cross Site Scripting (XSS) Vulnerability 0.2%
  • CVE-2025-26885 High 7.2 WordPress Assistant Plugin <= 1.5.1 - PHP Object Injection vulnerability 0.7%
  • CVE-2024-53797 Medium 6.5 WordPress Beaver Builder plugin <= 2.8.4.3 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-50430 Medium 6.5 WordPress Beaver Builder plugin <= 2.8.3.7 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2023-6694 Medium 6.4 Beaver Themer <= 1.4.9 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode 0.3%
  • CVE-2023-6695 Medium 6.5 Beaver Themer <= 1.4.9 - Authenticated (Contributor+) Sensitive Information Exposure via shortcode 0.5%
  • CVE-2024-30425 Medium 6.5 WordPress Beaver Builder plugin <= 2.7.4.4 - Cross Site Scripting (XSS) vulnerability 0.3%