Beaver Builder Page Builder – Drag and Drop Website Builder vulnerabilities

2 known vulnerabilities in Beaver Builder Page Builder – Drag and Drop Website Builder from Beaverbuilder. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.1 Critical severity

  Beaver Builder Page Builder – Drag and Drop…: Improper Control of Generation of Code

  CVE-2026-92084Oct 3, 2026Beaverbuilder

  The The Beaver Builder Page Builder – Drag and Drop Website Builder plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.11.0.5. This is due to the software allowing users to execute an action that does no

• 8.1 High severity

  Beaver Builder Page Builder – Drag and Drop…: Missing Authorization

  CVE-2025-12934Dec 23, 2025Beaverbuilder

  The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to unauthorized access and modification of data due to a missing capability check on the 'duplicate_wpml_layout' function in all versions up to, and including, 2.9.4.1. This makes i