Beaver Builder WordPress Page Builder Authorization Bypass Vulnerability in Versions Through 2.9.4

A vulnerability allowing authorization bypass has been identified in the Beaver Builder WordPress Page Builder plugin, affecting all versions through 2.9.4. The issue arises because the plugin fails to properly verify user authorization in the 'disable()' function. This flaw enables authenticated attackers with contributor-level access or higher to disable the Beaver Builder layout on selected posts and pages, leading to disruptions in content integrity and layout.

Impact

Exploitation of this vulnerability allows for unauthorized tampering with the Beaver Builder layout, causing disruptions in the visual presentation and organization of content on affected posts and pages.

Remediation

Users can update to Beaver Builder version 2.9.4.1 or a newer patched version to address this vulnerability.