Beaver Builder WordPress Plugin Code Injection Vulnerability Allowing Arbitrary Code Execution

A code injection vulnerability allowing arbitrary code execution has been identified in the Beaver Builder WordPress plugin, specifically in versions through 2.9.4.1. This vulnerability arises from improper control over code generation, enabling malicious actors to execute arbitrary code on affected sites.

Impact

Exploitation of this vulnerability allows for arbitrary code execution on the affected WordPress site.

Remediation

Users of the Beaver Builder WordPress plugin should update to version 2.9.4.2 or later to address this vulnerability. Patchstack users can enable auto-update for vulnerable plugins.