CVE-2025-12558

33th percentile - higher than 33% of all known CVEs

The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.9.4 via the 'get_attachment_sizes' function. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive data including the path and meta data of private attachments, which can be used to view the attachments.

An authenticated attacker with low privileges can access private attachments and their metadata, potentially leading to sensitive information disclosure.

Update the Beaver Builder plugin to a version later than 2.9.4. Consider restricting Contributor privileges if not needed.