Livemesh Addons for Beaver Builder

Livemesh Addons for Beaver Builder has 5 disclosed vulnerabilities in the WordSec catalog, reported between 2022 and 2026; 2 are fixed and 3 remain unpatched as of September 2026. Their average CVSS score is 6.0, and the most serious one scores 6.4 out of 10. 2026 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Scripting, behind 3 of the records (60%). Other recurring categories include Missing Authorization.

2 of the records (40%) have a vendor fix, while 3 remain unpatched. The oldest unresolved one dates back to 2025.

3 independent researchers contributed these findings, most of them (2) reported by Muhammad Yudha - DJ.

Strategic Overview

Avg CVSSMedium

6.0/ 10

Patch Coverage40%

Open

Fixed

Get automatic notifications for all Livemesh Addons for Beaver Builder vulnerabilities before they are exploited.

Most severe open issueCVSS 6.4CVE-2026-3897

Livemesh Addons for Beaver Builder <= 3.9.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Missing Authorization

Read the full analysis

Vulnerability Records

5 records


2026-05-26 17:34	Livemesh Addons for Beaver Builder <= 3.9.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Missing Authorization Livemesh Addons for Beaver Builder <= 3.9.2	`CVE-2026-3897`	6.4 Medium	Muhammad Yudha - DJ	No
2026-02-25 12:50	Livemesh Addons for Beaver Builder <= 3.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'title' and 'value' Shortcode Attributes Livemesh Addons for Beaver Builder <= 3.9.2	`CVE-2026-2029`	6.4 Medium	Muhammad Yudha - DJ	No
2025-12-31 00:00	Livemesh Addons for Beaver Builder <= 3.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting Livemesh Addons for Beaver Builder <= 3.9.2	`CVE-2025-62990`	6.4 Medium	Peter Thaleikis	No
2024-07-19 00:00	Livemesh Addons for Beaver Builder <= 3.6.1 - Authenticated (Editor+) Stored Cross-Site Scripting Livemesh Addons for Beaver Builder <= 3.6.1	`CVE-2024-38784`	4.4 Medium	João Pedro Soares de Alcântara	Yes
2022-03-04 00:00	Freemius SDK <= 2.4.2 - Missing Authorization Checks Livemesh Addons for Beaver Builder < 2.8.4	`CVE-2022-4974`	6.3 Medium	Anonymous	Yes

Showing 1–5 of 5 reports