WP Vulnerability WatchVulnerability data as of September 7, 2026

Known vulnerabilities in Beaver Builder Page Builder – Drag and Drop Website Builder

The Professional's Choice for Drag & Drop WordPress Page Building. Fast, Reliable, and Trusted since 2014.

35Reported vulnerabilities
9.8Highest CVSS score
2.10.3.2Latest version
100,000+Active installs

What to do now

Update Beaver Builder Page Builder – Drag and Drop Website Builder to 2.10.3.2 or later. 35 of these have a fixed version available. Updating resolves them.

Plugin last updated: August 13, 2026 / Tested up to WordPress: 7.1 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVESeverityExploit probability
next 30 days		 Affected versionsFixed inPublished
CVE-2022-36425 Critical 9.8 0.9% <= 2.5.4.3 to 2.5.4.3 (inclusive) 2.5.4.4 September 6, 2022
CVE-2025-69319 High 8.8 0.3% 2.9.4.1 and earlier 2.9.4.2 January 21, 2026
CVE-2025-12934 High 8.1 0.4% 0 to 2.9.4.1 (inclusive) 2.9.4.2 December 23, 2025
CVE-2026-2481 Medium 6.4 0.3% 2.10.1.1 and earlier 2.10.1.2 April 7, 2026
CVE-2026-40744 Medium 6.5 0.2% 2.10.1.2 and earlier 2.10.1.5 March 23, 2026
CVE-2024-53797 Medium 6.4 0.3% 2.8.4.3 and earlier 2.8.4.4 December 2, 2024
CVE-2024-50430 Medium 6.4 0.3% 2.8.3.7 and earlier 2.8.3.9 October 24, 2024
CVE-2024-37500 Medium 6.4 0.3% 2.8.2.2 and earlier 2.8.3 July 4, 2024
CVE-2024-4430 Medium 6.4 0.5% 2.8.1.2 and earlier 2.8.1.3 May 10, 2024
CVE-2024-30425 Medium 6.4 0.3% 2.7.4.4 and earlier 2.7.4.5 March 28, 2024
CVE-2024-0897 Medium 6.4 0.4% 2.7.4.2 and earlier 2.7.4.3 February 20, 2024
CVE-2022-2716 Medium 6.4 0.5% 2.5.5.2 and earlier 2.5.5.3 August 29, 2022
CVE-2022-2517 Medium 6.4 0.5% 2.5.5.2 and earlier 2.5.5.3 August 29, 2022
CVE-2022-2934 Medium 6.4 0.5% 2.5.5.2 and earlier 2.5.5.3 August 29, 2022
CVE-2022-2695 Medium 6.4 0.6% 2.5.5.2 and earlier 2.5.5.3 August 29, 2022
CVE-2026-17090 Medium 6.4 0.2% 0 to 2.10.2.2 (inclusive) 2.10.3.2 August 15, 2026
CVE-2026-1231 Medium 6.4 0.2% 0 to 2.10.0.5 (inclusive) 2.10.0.6 February 11, 2026
CVE-2024-11832 Medium 6.4 0.2% 2.8.4.4 and earlier 2.8.5.3 December 12, 2024
CVE-2024-1038 Medium 6.1 0.6% 0 to 2.7.4.2 (inclusive) 2.7.4.3 March 13, 2024
WF-cd88b116-0a6e-412b-8d43-024fdf36bcdf Medium 6.3 — 1.7 and earlier 1.7.1 February 8, 2016
CVE-2025-8897 Medium 6.1 0.2% 0 to 2.9.2.1 (inclusive) 2.9.3.1 August 28, 2025
CVE-2024-43926 Medium 6.1 0.3% 2.8.3.2 and earlier 2.8.3.4 August 26, 2024
CVE-2024-9505 Medium 5.4 0.3% 0 to 2.8.4.2 (inclusive) 2.8.4.3 October 29, 2024
CVE-2024-9049 Medium 5.4 0.3% Before 2.8.3.7 2.8.3.7 September 27, 2024
CVE-2024-7895 Medium 5.4 0.4% 0 to 2.8.3.5 (inclusive) 2.8.3.6 August 29, 2024
CVE-2024-3923 Medium 5.4 0.4% 0 to 2.8.1.1 (inclusive) 2.8.1.2 May 14, 2024
CVE-2024-2925 Medium 5.4 0.4% 0 to 2.8.0.5 (inclusive) 2.8.0.7 April 2, 2024
CVE-2024-1080 Medium 5.4 0.4% 0 to 2.7.4.4 (inclusive) 2.7.4.5 March 13, 2024
CVE-2024-1074 Medium 5.4 0.5% 0 to 2.7.4.2 (inclusive) 2.7.4.3 March 13, 2024
CVE-2024-0896 Medium 5.4 0.5% 0 to 2.7.4.2 (inclusive) 2.7.4.3 March 13, 2024
CVE-2024-0871 Medium 5.4 0.4% 0 to 2.7.4.2 (inclusive) 2.7.4.3 March 13, 2024
CVE-2023-50889 Medium 5.4 0.3% 2.7.2 and earlier 2.7.2.1 December 29, 2023
CVE-2025-12558 Medium 4.3 0.4% 0 to 2.9.4 (inclusive) 2.9.4.1 December 9, 2025
CVE-2025-12782 Medium 4.3 0.3% 0 to 2.9.4 (inclusive) 2.9.4.1 December 4, 2025
CVE-2025-11726 Medium 4.3 0.3% 0 to 2.9.4 (inclusive) 2.9.4.1 December 2, 2025

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.