WordPress security by component
Ultimate Addons for Beaver Builder
Plugin description
Ultimate Addons for Beaver Builder is a WordPress component with 3 published CVE records in this archive. The latest tracked vulnerability was published Jun 20, 2026; the highest CVE/CNA score is 9.3.
Plugin slug:
ultimate-addons-for-beaver-builderLatest vulnerability
CVE-2019-25763: Ultimate Addons for Beaver Builder: Privilege escalation or authentication bypass
Ultimate Addons for Beaver Builder is affected by privilege escalation or authentication bypass. Exposure depends on how the affected operation is made reachable by the site. A successful request can grant permissions or access that the caller should not possess. The published affected range is <= 1.2.4.1.
| Safe version |
|
||
|---|---|---|---|
| Jun 20, 2026 |
CVE-2019-25763
Ultimate Addons for Beaver Builder: Privilege escalation or authentication bypass
Ultimate Addons for Beaver Builder is affected by privilege escalation or authentication bypass. Exposure depends on how the affected operation is made reachable by the site. A successful request can grant permissions or access that the caller should not possess. The published affected range is <= 1.2.4.1.
|
> 1.2.4.1 |
CVE9.3
NVDPending
|
| Mar 30, 2024 |
CVE-2024-2143
Ultimate Addons for Beaver Builder – Lite: Cross-site scripting
Ultimate Addons for Beaver Builder – Lite is affected by cross-site scripting. Exploitation requires at least contributor-level access. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE6.4
NVD5.4
|
| Mar 30, 2024 |
CVE-2024-2140
Ultimate Addons for Beaver Builder – Lite: Cross-site scripting
Ultimate Addons for Beaver Builder – Lite is affected by cross-site scripting. Exploitation requires at least contributor-level access. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE6.4
NVD5.4
|