VendorsFastLine Mediabeaver_builderall versions

Vulnerabilities

FastLine Media Beaver Builder

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

31CVEs

CVE-2022-36425

WordPress Beaver Builder plugin <= 2.5.4.3 - Broken Access Control vulnerability

Published 2022-09-06 · Modified

9.8EPSS 0.009

CVE-2025-4102

Beaver Builder Plugin (Starter Version) <= 2.9.1 - Authenticated (Administrator+) Arbitrary File Upload

Published 2025-06-20 · Analyzed

7.2EPSS 0.006

CVE-2024-43926

WordPress Beaver Builder plugin <= 2.8.3.2 - Reflected Cross Site Scripting (XSS) vulnerability

Published 2024-08-29 · Analyzed

7.1EPSS 0.003

CVE-2023-50889

WordPress Beaver Builder Plugin <= 2.7.2 is vulnerable to Cross Site Scripting (XSS)

Published 2023-12-29 · Modified

6.5EPSS 0.003

CVE-2024-53797

WordPress Beaver Builder plugin <= 2.8.4.3 - Cross Site Scripting (XSS) vulnerability

Published 2024-12-06 · Modified

6.5EPSS 0.003

CVE-2024-37500

WordPress Beaver Builder plugin <= 2.8.2.2 - Cross Site Scripting (XSS) vulnerability

Published 2024-07-21 · Analyzed

6.5EPSS 0.003

CVE-2024-30425

WordPress Beaver Builder plugin <= 2.7.4.4 - Cross Site Scripting (XSS) vulnerability

Published 2024-03-29 · Modified

6.5EPSS 0.003

CVE-2022-2695

Beaver Builder – WordPress Page Builder <= 2.5.5.2 - Authenticated Stored Cross-Site Scripting via 'caption'

Published 2022-09-06 · Modified

6.4EPSS 0.006

CVE-2022-2716

Beaver Builder – WordPress Page Builder <= 2.5.5.2 - Authenticated Stored Cross-Site Scripting via Text Editor

Published 2022-09-06 · Modified

6.4EPSS 0.006

CVE-2022-2934

Beaver Builder – WordPress Page Builder <= 2.5.5.2 - Authenticated Stored Cross-Site Scripting via Image URL

Published 2022-09-06 · Modified

6.4EPSS 0.006

CVE-2022-2517

Beaver Builder – WordPress Page Builder <= 2.5.5.2 - Authenticated Stored Cross-Site Scripting via Caption - On Hover

Published 2022-09-06 · Modified

6.4EPSS 0.005

CVE-2024-1074

Beaver Builder – WordPress Page Builder <= 2.7.4.2 - Authenticated(Contributor+) Stored Cross-Site Scripting via Audio Widget

Published 2024-03-13 · Modified

6.4EPSS 0.005

CVE-2024-0896

Beaver Builder – WordPress Page Builder <= 2.7.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

Published 2024-03-13 · Modified

6.4EPSS 0.005

CVE-2024-4430

Beaver Builder <= 2.8.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via photo widget crop attribute

Published 2024-05-10 · Modified

6.4EPSS 0.005

CVE-2024-3923

Beaver Builder – WordPress Page Builder <= 2.8.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

Published 2024-05-09 · Modified

6.4EPSS 0.004

CVE-2024-1080

Beaver Builder – WordPress Page Builder <= 2.7.4.4 - Authenticated(Contributor+) Stored Cross-Site Scripting via heading tag

Published 2024-03-13 · Modified

6.4EPSS 0.004

CVE-2024-0897

Beaver Builder – WordPress Page Builder <= 2.7.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

Published 2024-03-13 · Modified

6.4EPSS 0.004

CVE-2024-2925

Beaver Builder – WordPress Page Builder <= 2.8.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button

Published 2024-04-02 · Modified

6.4EPSS 0.004

CVE-2024-7895

Beaver Builder (Lite Version) <= 2.8.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via type Parameter

Published 2024-08-29 · Analyzed

6.4EPSS 0.004

CVE-2024-9049

Beaver Builder – WordPress Page Builder <= 2.8.3.6 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Button Group Module

Published 2024-09-27 · Analyzed

6.4EPSS 0.003

CVE-2024-9505

Beaver Builder – WordPress Page Builder <= 2.8.4.2 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Button Widget

Published 2024-10-29 · Analyzed

6.4EPSS 0.003

CVE-2024-11832

Beaver Builder – WordPress Page Builder <= 2.8.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting

Published 2024-12-13 · Analyzed

6.4EPSS 0.002

CVE-2025-8427

Beaver Builder Plugin (Starter Version) <= 2.9.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'auto_play'

Published 2025-10-23 · Analyzed

6.4EPSS 0.002

CVE-2024-1038

Beaver Builder – WordPress Page Builder <= 2.7.4.2 - Reflected (DOM-Based) Cross-Site Scripting

Published 2024-03-13 · Modified

6.1EPSS 0.006

CVE-2025-8897

Beaver Builder Plugin (Lite Version) <= 2.9.2.1 - Reflected Cross-Site Scripting

Published 2025-08-28 · Analyzed

6.1EPSS 0.002

CVE-2024-50430

WordPress Beaver Builder plugin <= 2.8.3.7 - Cross Site Scripting (XSS) vulnerability

Published 2024-11-19 · Modified

5.9EPSS 0.003

CVE-2024-0871

Beaver Builder <= 2.7.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Icon Widget

Published 2024-03-13 · Modified

5.4EPSS 0.004

CVE-2021-42748

In Beaver Builder through 2.5.0.3, attackers can bypass the visibility controls protection mechanism via the REST API.

Published 2022-01-07 · Modified

5.3EPSS 0.010

CVE-2025-12558

Beaver Builder – WordPress Page Builder <= 2.9.4 - Authenticated (Contributor+) Sensitive Information Exposure

Published 2025-12-09 · Analyzed

4.3EPSS 0.004

CVE-2025-11726

Beaver Builder – WordPress Page Builder <= 2.9.4 - Missing Authorization to Authenticated (Contributor+) Global Preset Modification

Published 2025-12-02 · Analyzed

4.3EPSS 0.003

CVE-2025-12782

Beaver Builder – WordPress Page Builder <= 2.9.4 - Missing Authorization to Authenticated (Contributor+) Builder Status Tampering

Published 2025-12-04 · Analyzed

4.3EPSS 0.003

FastLine Media Beaver Builder

Security check