Advisories · Technology
The Beaver Builder Team Beaver Builder Plugin (Starter Version).
Every CVE that names The Beaver Builder Team Beaver Builder Plugin (Starter Version) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.1 Medium
Beaver Builder Plugin (Pro Version) <= 2.11.0.1 - Reflected Cross-Site Scripting via 'no_results_message' node_preview Parameter
- The Beaver Builder Team Beaver Builder Plugin (Starter Version)
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Beaver Builder Plugin (Starter Version) <= 2.9.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'auto_play'
- The Beaver Builder Team Beaver Builder Plugin (Starter Version)
- Cross-site scripting (XSS)
- CVSS 7.2 High
Beaver Builder Plugin (Starter Version) <= 2.9.1 - Authenticated (Administrator+) Arbitrary File Upload
- The Beaver Builder Team Beaver Builder Plugin (Starter Version)
- Unrestricted file upload