The Ultimate Addons for Beaver Builder – Lite plugin for WordPress has a security vulnerability that allows attackers to inject harmful scripts into web pages. This can be done by using the Image Separator widget and affects all versions up to 1.5.7. Attackers with contributor-level access or higher can exploit this vulnerability to execute their scripts whenever a user visits a page with the injected code.