The Beaver Builder Team Beaver Builder Plugin (Starter Version)

• CVE-2026-18843 Medium 6.1 Beaver Builder Plugin (Pro Version) <= 2.11.0.1 - Reflected Cross-Site Scripting via 'no_results_message' node_preview Parameter 0.3%
• CVE-2025-8427 Medium 6.4 Beaver Builder Plugin (Starter Version) <= 2.9.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'auto_play' 0.2%
• CVE-2025-4102 High 7.2 Beaver Builder Plugin (Starter Version) <= 2.9.1 - Authenticated (Administrator+) Arbitrary File Upload 0.6%