🧹It's time for some spring cleaning! All researchers earn over 6.25x our normal bounty rates, through May 27th, 2024, when Wordfence handles responsible disclosure for our Spring Cleaning Bug Extravaganza! Learn more about our bug bounty program
Register as a researcher and submit your vulnerabilities today!

Beaver Builder Addons by WPZOOM

Wordfence Intelligence > Vulnerability Database > WordPress Plugins > Beaver Builder Addons by WPZOOM

Information

Software Type	Plugin
Software Slug	wpzoom-addons-for-beaver-builder (view on wordpress.org)
Software Status	Active
Software Author	wpzoom
Software Website	www.wpzoom.com
Software Downloads	57,789
Software Active Installs	6,000
Software Record Last Updated	April 27, 2024

5 Vulnerabilities

Beaver Builder Addons by WPZOOM <= 1.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Widget

6.4

CVE-2024-2181

Mar 13, 2024

Researcher: Francesco Carlucci

Beaver Builder Addons by WPZOOM <= 1.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Heading Widget

6.4

CVE-2024-2183

Mar 13, 2024

Researcher: Francesco Carlucci

Beaver Builder Addons by WPZOOM <= 1.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Box Widget

6.4

CVE-2024-2185

Mar 13, 2024

Researcher: Francesco Carlucci

Beaver Builder Addons by WPZOOM <= 1.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Team Members Widget

6.4

CVE-2024-2186

Mar 13, 2024

Researcher: Francesco Carlucci

Beaver Builder Addons by WPZOOM <= 1.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Testimonials Widget

6.4

CVE-2024-2187

Mar 13, 2024

Researcher: Francesco Carlucci

Title	CVE ID	CVSS	Researchers	Date
Beaver Builder Addons by WPZOOM <= 1.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Widget	CVE-2024-2181	6.4	Francesco Carlucci	March 13, 2024
Beaver Builder Addons by WPZOOM <= 1.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Heading Widget	CVE-2024-2183	6.4	Francesco Carlucci	March 13, 2024
Beaver Builder Addons by WPZOOM <= 1.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Box Widget	CVE-2024-2185	6.4	Francesco Carlucci	March 13, 2024
Beaver Builder Addons by WPZOOM <= 1.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Team Members Widget	CVE-2024-2186	6.4	Francesco Carlucci	March 13, 2024
Beaver Builder Addons by WPZOOM <= 1.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Testimonials Widget	CVE-2024-2187	6.4	Francesco Carlucci	March 13, 2024

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.