Really Simple Security logo

Log out
Get PRO

Latest

Input validation vulnerability in Beaver Builder – WordPress Page Builder 2.8.1.2

  • Severity: medium-risk
  • Status: Fixed
  • Publication: May 10, 2024

A popular plugin for WordPress called Beaver Builder has a security issue that can allow hackers to inject harmful code into pages. This can happen if someone with certain permissions on the website uses a feature that crops photos. The plugin has not been properly set up to prevent this kind of attack, so it is important to update to the latest version (2.8.1.2) to protect against it.

Detected in:

Beaver Builder – WordPress Page Builder fixed vulnerable versions: >= * <= 2.8.1.2
Beaver Builder Page Builder – Drag and Drop Website Builder fixed vulnerable versions:

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.