Vulnerabilities (CVE)

Filtered by vendor Fastlinemedia Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-50889 1 Fastlinemedia 1 Beaver Builder 2024-01-05 N/A 5.4 MEDIUM
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in The Beaver Builder Team Beaver Builder – WordPress Page Builder allows Stored XSS.This issue affects Beaver Builder – WordPress Page Builder: from n/a through 2.7.2.
CVE-2021-42748 1 Fastlinemedia 1 Beaver Builder 2023-08-08 5.0 MEDIUM 5.3 MEDIUM
In Beaver Builder through 2.5.0.3, attackers can bypass the visibility controls protection mechanism via the REST API.
CVE-2021-42749 1 Fastlinemedia 1 Beaver Themer 2022-01-14 5.0 MEDIUM 5.3 MEDIUM
In Beaver Themer, attackers can bypass conditional logic controls (for hiding content) when viewing the post archives. Exploitation requires that a Themer layout is applied to the archives, and that the post excerpt field is not set.