All 3 CVE vulnerabilities found in Beaver Builder Plugin (Starter Version), with AI-generated Chinese analysis, references, and POCs.
Vendor: The Beaver Builder Team
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-18843 | Beaver Builder Plugin (Pro Version) <= 2.11.0.1 - Reflected Cross-Site Scripting via 'no_results_message' node_preview Parameter CWE-79 | 6.1 | Medium | 2026-09-05 |
| CVE-2025-8427 | Beaver Builder Plugin (Starter Version) <= 2.9.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'auto_play' CWE-79 | 6.4 | Medium | 2025-10-23 |
| CVE-2025-4102 | Beaver Builder Plugin (Starter Version) <= 2.9.1 - Authenticated (Administrator+) Arbitrary File Upload CWE-434 | 7.2 | High | 2025-06-20 |
All 3 known CVE vulnerabilities affecting Beaver Builder Plugin (Starter Version) with full Chinese analysis, references, and POCs where available.