PT-2026-33046 · Beaver Builder · Beaver Builder

Published 2026-04-15 · Updated 2026-04-15 · CVE-2026-40744

NVD

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Beaver Builder Beaver Builder beaver-builder-lite-version allows Blind SQL Injection.This issue affects Beaver Builder: from n/a through <= 2.10.1.2.

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2026-40744

Affected Products

Beaver Builder

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-40744 · Security Note
• https://patchstack.com/database/Wordpress/Plugin/beaver-builder-lite-version/vulnerability/wordpress-beaver-builder-plugin-2-10-1-2-sql-injection-vulnerability?_s_id=cve · Note