Beaver Builder Page Builder vulnerabilities

The Beaver Builder Page Builder plugin for WordPress up to version 2.11.0.5 is vulnerable to arbitrary shortcode execution. This is due to insufficient validation before running do_shortcode, allowing unauthenticated attackers to execute arbitrary shortcodes. Exploitation requires a page with the Sidebar module containing a widget that displays attacker-controlled text, such as the Recent Comments widget with approved comments.

The Beaver Builder Page Builder plugin for WordPress up to version 2.10.2.2 is vulnerable to stored cross-site scripting via the Button Code setting in the Button Module. Insufficient input sanitization and output escaping allow authenticated attackers with author-level access to inject arbitrary scripts that execute when a user accesses an injected page.

The Beaver Builder Page Builder plugin for WordPress up to version 2.10.1.1 has a stored XSS vulnerability via the 'settings[js]' parameter. Authenticated attackers with author-level access can inject arbitrary scripts that execute when a page is visited.