<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: beaverbuilder-beaver-builder-page-builder-drag-and-drop-website-builder</title><description>Every new CVE for beaverbuilder-beaver-builder-page-builder-drag-and-drop-website-builder.</description><link>https://agentprime.io/</link><item><title>CVE-2026-92084: Beaver Builder Page Builder &lt;= 2.11.0.5 - Unauthenticated Arbitrary Shortcode Execution via Sidebar Module Widget Output</title><link>https://agentprime.io/advisories/CVE-2026-92084/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-92084/</guid><description>CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 03 Oct 2026 07:39:17 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-95865: Beaver Builder Page Builder &lt;= 2.11.0.5 - Authenticated (Contributor+) SQL Injection via &apos;fields[][value]&apos; Parameter</title><link>https://agentprime.io/advisories/CVE-2026-95865/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-95865/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 03 Oct 2026 02:25:34 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-18021: Beaver Builder Page Builder &lt;= 2.10.3.1 - Unauthenticated Arbitrary Shortcode Execution</title><link>https://agentprime.io/advisories/CVE-2026-18021/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-18021/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 08 Sep 2026 11:30:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-17090: Beaver Builder Page Builder &lt;= 2.10.2.2 - Authenticated (Author+) Stored Cross-Site Scripting via Button Module &apos;button&apos; Parameter</title><link>https://agentprime.io/advisories/CVE-2026-17090/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-17090/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 15 Aug 2026 03:25:57 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-2481: Beaver Builder Page Builder – Drag and Drop Website Builder &lt;= 2.10.1.1 - Authenticated (Author+) Stored Cross-Site Scripting via &apos;settings[js]&apos;</title><link>https://agentprime.io/advisories/CVE-2026-2481/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-2481/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 08 Apr 2026 11:16:58 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-1231: Beaver Builder Page Builder – Drag and Drop Website Builder &lt;= 2.10.0.5 - Authenticated (Custom+) Missing Authorization to Stored Cross-Site Scripting via Global Settings</title><link>https://agentprime.io/advisories/CVE-2026-1231/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-1231/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 11 Feb 2026 01:23:34 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-12934: Beaver Builder – WordPress Page Builder &lt;= 2.9.4.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Update</title><link>https://agentprime.io/advisories/CVE-2025-12934/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-12934/</guid><description>CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 23 Dec 2025 09:20:01 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-12558: Beaver Builder – WordPress Page Builder &lt;= 2.9.4 - Authenticated (Contributor+) Sensitive Information Exposure</title><link>https://agentprime.io/advisories/CVE-2025-12558/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-12558/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 09 Dec 2025 13:51:07 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-12782: Beaver Builder – WordPress Page Builder &lt;= 2.9.4 - Missing Authorization to Authenticated (Contributor+) Builder Status Tampering</title><link>https://agentprime.io/advisories/CVE-2025-12782/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-12782/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 04 Dec 2025 06:48:39 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-11726: Beaver Builder – WordPress Page Builder &lt;= 2.9.4 - Missing Authorization to Authenticated (Contributor+) Global Preset Modification</title><link>https://agentprime.io/advisories/CVE-2025-11726/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-11726/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 02 Dec 2025 07:24:31 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-8897: Beaver Builder Plugin (Lite Version) &lt;= 2.9.2.1 - Reflected Cross-Site Scripting</title><link>https://agentprime.io/advisories/CVE-2025-8897/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-8897/</guid><description>CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 28 Aug 2025 01:46:29 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-11832: Beaver Builder – WordPress Page Builder &lt;= 2.8.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting</title><link>https://agentprime.io/advisories/CVE-2024-11832/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-11832/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 13 Dec 2024 08:24:47 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-9505: Beaver Builder – WordPress Page Builder &lt;= 2.8.4.2 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Button Widget</title><link>https://agentprime.io/advisories/CVE-2024-9505/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-9505/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 29 Oct 2024 13:53:55 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-9049: Beaver Builder – WordPress Page Builder &lt;= 2.8.3.6 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Button Group Module</title><link>https://agentprime.io/advisories/CVE-2024-9049/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-9049/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 27 Sep 2024 06:53:57 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-7895: Beaver Builder (Lite Version) &lt;= 2.8.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via type Parameter</title><link>https://agentprime.io/advisories/CVE-2024-7895/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-7895/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 29 Aug 2024 10:59:41 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-4430: Beaver Builder &lt;= 2.8.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via photo widget crop attribute</title><link>https://agentprime.io/advisories/CVE-2024-4430/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-4430/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 10 May 2024 21:32:42 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-3923: Beaver Builder – WordPress Page Builder &lt;= 2.8.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting</title><link>https://agentprime.io/advisories/CVE-2024-3923/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-3923/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 09 May 2024 20:03:35 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-2925: Beaver Builder – WordPress Page Builder &lt;= 2.8.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button</title><link>https://agentprime.io/advisories/CVE-2024-2925/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-2925/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 02 Apr 2024 06:47:44 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-1038: Beaver Builder – WordPress Page Builder &lt;= 2.7.4.2 - Reflected (DOM-Based) Cross-Site Scripting</title><link>https://agentprime.io/advisories/CVE-2024-1038/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-1038/</guid><description>CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 13 Mar 2024 15:27:20 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-1080: Beaver Builder – WordPress Page Builder &lt;= 2.7.4.4 - Authenticated(Contributor+) Stored Cross-Site Scripting via heading tag</title><link>https://agentprime.io/advisories/CVE-2024-1080/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-1080/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 13 Mar 2024 15:27:18 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-1074: Beaver Builder – WordPress Page Builder &lt;= 2.7.4.2 - Authenticated(Contributor+) Stored Cross-Site Scripting via Audio Widget</title><link>https://agentprime.io/advisories/CVE-2024-1074/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-1074/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 13 Mar 2024 15:27:08 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-0896: Beaver Builder – WordPress Page Builder &lt;= 2.7.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting</title><link>https://agentprime.io/advisories/CVE-2024-0896/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-0896/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 13 Mar 2024 15:27:06 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-0871: Beaver Builder &lt;= 2.7.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Icon Widget</title><link>https://agentprime.io/advisories/CVE-2024-0871/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-0871/</guid><description>CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 13 Mar 2024 15:26:39 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-0897: Beaver Builder – WordPress Page Builder &lt;= 2.7.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting</title><link>https://agentprime.io/advisories/CVE-2024-0897/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-0897/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 13 Mar 2024 15:26:37 GMT</pubDate><category>CVE</category></item></channel></rss>