CVE-2025-12782

The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.9.4. This is due to the plugin not properly verifying a user's authorization in the disable() function. This makes it possible for authenticated attackers, with contributor level access and above, to disable the Beaver Builder layout on arbitrary posts and pages, causing content integrity issues and layout disruption on those pages.

CVSS v3 4.3 MEDIUM

4.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.8 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://plugins.trac.wordpress.org/changeset/3406987/beaver-builder-lite-version	Patch
https://www.wordfence.com/threat-intel/vulnerabilities/id/710ed734-ca98-4ab3-82d5-359e683ee062?source=cve	Product Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:fastlinemedia:beaver_builder:*:*:*:*:lite:wordpress:*:*

History

18 Oct 2026, 17:10

Type	Values Removed	Values Added
Summary		(es) El plugin Beaver Builder - WordPress Page Builder para WordPress es vulnerable a una omisión de autorización en todas las versiones hasta la 2.9.4, inclusive. Esto se debe a que el plugin no verifica correctamente la autorización de un usuario en la función disable(). Esto hace posible que atacantes autenticados, con acceso de nivel de colaborador y superior, deshabiliten el diseño de Beaver Builder en publicaciones y páginas arbitrarias, causando problemas de integridad del contenido e interrupción del diseño en esas páginas.

Information

Published : 2025-12-04 07:16

Updated : 2026-10-18 17:10

NVD link : CVE-2025-12782

Mitre link : CVE-2025-12782

CVE.ORG link : CVE-2025-12782

JSON object : View

Products Affected

fastlinemedia

beaver_builder

CWE

CWE-862

Missing Authorization

{"id": "CVE-2025-12782", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-12782", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2025-12-05T17:21:21.671347Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security@wordfence.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 2.8}]}, "affected": [{"source": "security@wordfence.com", "affectedData": [{"vendor": "beaverbuilder", "product": "Beaver Builder Page Builder \u2013 Drag and Drop Website Builder", "versions": [{"status": "affected", "version": "0", "versionType": "semver", "lessThanOrEqual": "2.9.4"}], "defaultStatus": "unaffected"}]}], "published": "2025-12-04T07:16:13.883", "references": [{"url": "https://plugins.trac.wordpress.org/changeset/3406987/beaver-builder-lite-version", "tags": ["Patch"], "source": "security@wordfence.com"}, {"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/710ed734-ca98-4ab3-82d5-359e683ee062?source=cve", "tags": ["Product", "Third Party Advisory"], "source": "security@wordfence.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security@wordfence.com", "description": [{"lang": "en", "value": "CWE-862"}]}], "descriptions": [{"lang": "en", "value": "The Beaver Builder \u2013 WordPress Page Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.9.4. This is due to the plugin not properly verifying a user's authorization in the disable() function. This makes it possible for authenticated attackers, with contributor level access and above, to disable the Beaver Builder layout on arbitrary posts and pages, causing content integrity issues and layout disruption on those pages."}, {"lang": "es", "value": "El plugin Beaver Builder - WordPress Page Builder para WordPress es vulnerable a una omisi\u00f3n de autorizaci\u00f3n en todas las versiones hasta la 2.9.4, inclusive. Esto se debe a que el plugin no verifica correctamente la autorizaci\u00f3n de un usuario en la funci\u00f3n disable(). Esto hace posible que atacantes autenticados, con acceso de nivel de colaborador y superior, deshabiliten el dise\u00f1o de Beaver Builder en publicaciones y p\u00e1ginas arbitrarias, causando problemas de integridad del contenido e interrupci\u00f3n del dise\u00f1o en esas p\u00e1ginas."}], "lastModified": "2026-10-18T17:10:00.110", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:fastlinemedia:beaver_builder:*:*:*:*:lite:wordpress:*:*", "vulnerable": true, "matchCriteriaId": "3CC303E8-BD30-4426-8AB7-58F4CA9E9630", "versionEndExcluding": "2.9.4.1"}], "operator": "OR"}]}], "sourceIdentifier": "security@wordfence.com"}