The “Ultimate Addons for Beaver Builder – Lite” plugin for WordPress has a security vulnerability that allows attackers to inject harmful code into web pages. This can happen when a user with contributor-level access or higher adds an Advanced Icons widget to a page. The plugin is vulnerable in all versions up to and including 1.5.7.