Vulnerabilities / Beaver Builder – WordPress Page Builder (Free & Pro)
Beaver Builder – WordPress Page Builder (Free & Pro) vulnerabilities
Advisories WPSec published for Beaver Builder Page Builder – Drag and Drop Website Builder. Other sources may list more. Its attack surface: Beaver Builder – WordPress Page Builder (Free & Pro) on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-02 | WPSEC-2026-0280 | Beaver Builder – WordPress Page Builder (Free & Pro) <= 2.11.0.5 - Authenticated (Contributor+) SQL Injection via Auto-Suggest Field Values | Medium 6.5 | 2.11.0.6 |
| 2026-10-02 | WPSEC-2026-0279 | Beaver Builder – WordPress Page Builder (Free & Pro) <= 2.11.0.5 - Unauthenticated Arbitrary Shortcode Execution via Sidebar Module | Medium 4.8 | 2.11.0.6 |
License: CC BY 4.0