PT-2025-52730 · WordPress · Beaver Builder – Wordpress Page Builder

Athiwat Tiprasaharn

·

Published

2025-12-23

·

Updated

2025-12-28

·

CVE-2025-12934

CVSS v3.1

8.1

High

VectorAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Name of the Vulnerable Software and Affected Versions Beaver Builder – WordPress Page Builder plugin versions prior to 2.9.4.1
Description The Beaver Builder – WordPress Page Builder plugin for WordPress is susceptible to unauthorized access and modification of data. This is due to a missing capability check on the duplicate wpml layout function. Authenticated attackers with Subscriber-level access or higher can update arbitrary posts with content from other existing posts. This could expose private and password-protected content and potentially delete content not saved in revisions or backups. Posts must have been created with Beaver Builder to be copied or updated.
Recommendations Update Beaver Builder – WordPress Page Builder plugin to a version later than 2.9.4.1.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2025-12934

Affected Products

Beaver Builder – Wordpress Page Builder