CVE-2026-92084

Published 3 October 2026 · tracked since 3 October 2026

Description

The The Beaver Builder Page Builder – Drag and Drop Website Builder plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.11.0.5. This is due to the software allowing users to execute an action that does not properly validate a value before runni

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-105118 MEDIUM 4.7
• CVE-2026-97873
• CVE-2026-71889
• CVE-2026-71891
• CVE-2026-71885
• CVE-2026-71886
• CVE-2026-92767 MEDIUM 6.4
• CVE-2026-94505 HIGH 8.1
• CVE-2026-96267 HIGH 7.5
• CVE-2026-97343 MEDIUM 4.3

→ Open the live CVE board · all tools