Extension WordPress
Vulnérabilités Beaver Builder Page Builder – Drag and Drop Website Builder, page 2
Cette page rassemble les failles publiées pour Beaver Builder Page Builder – Drag and Drop Website Builder, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Beaver Builder Page Builder – Drag and Drop Website Builder
34 fiches
Beaver Builder <= 2.7.4.4 – Authenticated (Contributor+) Stored Cross-Site Scripting
The Beaver Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.7.4.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and…
*-2.7.4.4
2.7.4.5
28/03/2024
Beaver Builder – WordPress Page Builder <= 2.7.4.4 – Authenticated(Contributor+) Stored Cross-Site Scripting via heading tag
The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the via the heading tag in all versions up to, and including, 2.7.4.4 due to insufficient input sanitization and output escaping.…
*-2.7.4.4
2.7.4.5
11/03/2024
Beaver Builder – WordPress Page Builder <= 2.7.4.2 – Authenticated(Contributor+) Stored Cross-Site Scripting via Audio Widget
The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the audio widget 'link_url' parameter in all versions up to, and including, 2.7.4.2 due to insufficient input sanitization and output escaping.…
*-2.7.4.2
2.7.4.3
28/02/2024
Beaver Builder <= 2.7.4.2 – Authenticated (Contributor+) Stored Cross-Site Scripting via Icon Widget
The Beaver Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Icon Widget 'fl_builder_data[node_preview][link]' and 'fl_builder_data[settings][link_target]' parameters in all versions up to, and including, 2.7.4.2 due to insufficient input sanitization and output escaping. This makes…
*-2.7.4.2
2.7.4.3
20/02/2024
Beaver Builder – WordPress Page Builder <= 2.7.4.2 – Reflected (DOM-Based) Cross-Site Scripting
The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to DOM-Based Reflected Cross-Site Scripting via a 'playground.wordpress.net' parameter in all versions up to, and including, 2.7.4.2 due to insufficient input sanitization and output escaping. This…
*-2.7.4.2
2.7.4.3
20/02/2024
Beaver Builder – WordPress Page Builder <= 2.7.4.2 – Authenticated (Contributor+) Stored Cross-Site Scripting
The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the image URL parameter in all versions up to, and including, 2.7.4.2 due to insufficient input sanitization and output escaping. This…
*-2.7.4.2
2.7.4.3
20/02/2024
Beaver Builder – WordPress Page Builder <= 2.7.4.2 – Authenticated (Contributor+) Stored Cross-Site Scripting
The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the button link parameter in all versions up to, and including, 2.7.4.2 due to insufficient input sanitization and output escaping. This…
*-2.7.4.2
2.7.4.3
20/02/2024
Beaver Builder – WordPress Page Builder <= 2.7.2 – Authenticated (Contributor+) Stored Cross-Site Scripting
The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via settings in all versions up to, and including, 2.7.2 due to insufficient input sanitization and output escaping. This makes it possible…
*-2.7.2
2.7.2.1
26/12/2023
Beaver Builder – WordPress Page Builder <= 2.5.5.2 – Authenticated Stored Cross-Site Scripting via 'caption'
The Beaver Builder – WordPress Page Builder for WordPress is vulnerable to Stored Cross-Site Scripting via the 'caption' parameter added to images via the media uploader in versions up to, and including, 2.5.5.2 due to insufficient input sanitization…
*-2.5.5.2
2.5.5.3
29/08/2022
Beaver Builder – WordPress Page Builder <= 2.5.5.2 – Authenticated Stored Cross-Site Scripting via Image URL
The Beaver Builder – WordPress Page Builder for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Image URL' value found in the Media block in versions up to, and including, 2.5.5.2 due to insufficient input sanitization and…
*-2.5.5.2
2.5.5.3
29/08/2022
Beaver Builder – WordPress Page Builder <= 2.5.5.2 – Authenticated Stored Cross-Site Scripting via Caption – On Hover
The Beaver Builder – WordPress Page Builder for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Caption – On Hover' value associated with images in versions up to, and including, 2.5.5.2 due to insufficient input sanitization and…
*-2.5.5.2
2.5.5.3
29/08/2022
Beaver Builder – WordPress Page Builder <= 2.5.5.2 – Authenticated Stored Cross-Site Scripting via Text Editor
The Beaver Builder – WordPress Page Builder for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Text Editor' block in versions up to, and including, 2.5.5.2 due to insufficient input sanitization and output escaping. This makes it…
*-2.5.5.2
2.5.5.3
29/08/2022
Beaver Builder <= 2.5.4.3 – Missing Authorization
The Beaver Builder plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the save_settings function in versions up to, and including, 2.5.4.3. This makes it possible for authenticated attackers, with subscriber-level permissions…
*-2.5.4.3
2.5.4.4
20/07/2022
Beaver Builder – WordPress Page Builder (Free & Pro) <= 1.7 – Authorization Bypass
The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to authorization bypass in versions up to, and including, 1.7 due to bypass in how the capability checking functionality works in the call_action() function. An attacker…
*-1.7
1.7.1
08/02/2016
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.