WordPress security by component
Ultimate Addons for Beaver Builder
Plugin description
Ultimate Addons for Beaver Builder is a WordPress component with 2 published CVE records in this archive. The latest tracked vulnerability was published May 17, 2024; the highest CVE/CNA score is 8.8.
Plugin slug:
bb-ultimate-addonLatest vulnerability
CVE-2023-51401: Ultimate Addons for Beaver Builder: Filesystem traversal
Ultimate Addons for Beaver Builder is affected by filesystem traversal. Exposure depends on how the affected operation is made reachable by the site. A crafted path can escape the intended directory and reach files or directories elsewhere on the server.
| Safe version |
|
||
|---|---|---|---|
| May 17, 2024 |
CVE-2023-51401
Ultimate Addons for Beaver Builder: Filesystem traversal
Ultimate Addons for Beaver Builder is affected by filesystem traversal. Exposure depends on how the affected operation is made reachable by the site. A crafted path can escape the intended directory and reach files or directories elsewhere on the server.
|
See mitigation notes |
CVE6.3
NVD6.5
|
| May 17, 2024 |
CVE-2023-51398
Ultimate Addons for Beaver Builder: Privilege escalation or authentication bypass
Ultimate Addons for Beaver Builder is affected by privilege escalation or authentication bypass. Exposure depends on how the affected operation is made reachable by the site. A successful request can grant permissions or access that the caller should not possess.
|
See mitigation notes |
CVE8.8
NVD8.8
|