Input validation vulnerability in Beaver Builder Plugin (Starter Version) 2.9.2.1

The Beaver Builder Plugin (Starter Version) for WordPress is at risk of being hacked through a method called Stored Cross-Site Scripting. This can happen if someone uses the ‘auto_play’ feature, which is available in versions 2.9.2.1 and earlier. The plugin does not have enough protection in place to prevent harmful code from being inserted into web pages. This means that someone who is logged in and has Contributor-level access or higher can add dangerous code to a page that will run when someone else visits that page.