WPZOOM Addons for Beaver Builder

WPZOOM Addons for Beaver Builder has 7 disclosed vulnerabilities in the WordSec catalog, all reported in 2024; all 7 are fixed as of September 2026. Their average CVSS score is 6.5, and the most serious one scores 7.2 out of 10. Severity breakdown: 0 critical and 1 high. 2024 was the busiest year with 7 disclosures.

The most common weakness is Cross-Site Scripting, behind 6 of the records (86%). Other recurring categories include PHP Remote File Inclusion.

Every one of the 7 issues recorded for WPZOOM Addons for Beaver Builder has a vendor fix available, so running the current release closes all known holes.

3 independent researchers contributed these findings, most of them (5) reported by Francesco Carlucci. WPZOOM Addons for Beaver Builder is installed on roughly 4,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSMedium

6.5/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all WPZOOM Addons for Beaver Builder vulnerabilities before they are exploited.

Highest severity on recordCVSS 7.2CVE-2024-37464

Beaver Builder Addons by WPZOOM <= 1.3.5 - Authenticated (Editor+) Local File Inclusion

Read the full analysis

Vulnerability Records

7 records


2024-07-01 00:00	Beaver Builder Addons by WPZOOM <= 1.3.5 - Authenticated (Editor+) Local File Inclusion WPZOOM Addons for Beaver Builder <= 1.3.5	`CVE-2024-37464`	7.2 High	João Pedro Soares de Alcântara	Yes
2024-03-28 00:00	Beaver Builder Addons by WPZOOM <= 1.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting WPZOOM Addons for Beaver Builder <= 1.3.4	`CVE-2024-30424`	6.4 Medium	Abu Hurayra (HurayraIIT)	Yes
2024-03-13 00:00	Beaver Builder Addons by WPZOOM <= 1.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Testimonials Widget WPZOOM Addons for Beaver Builder <= 1.3.4	`CVE-2024-2187`	6.4 Medium	Francesco Carlucci	Yes
2024-03-13 00:00	Beaver Builder Addons by WPZOOM <= 1.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Box Widget WPZOOM Addons for Beaver Builder <= 1.3.4	`CVE-2024-2185`	6.4 Medium	Francesco Carlucci	Yes
2024-03-13 00:00	Beaver Builder Addons by WPZOOM <= 1.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Widget WPZOOM Addons for Beaver Builder <= 1.3.4	`CVE-2024-2181`	6.4 Medium	Francesco Carlucci	Yes
2024-03-13 00:00	Beaver Builder Addons by WPZOOM <= 1.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Team Members Widget WPZOOM Addons for Beaver Builder <= 1.3.4	`CVE-2024-2186`	6.4 Medium	Francesco Carlucci	Yes
2024-03-13 00:00	Beaver Builder Addons by WPZOOM <= 1.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Heading Widget WPZOOM Addons for Beaver Builder <= 1.3.4	`CVE-2024-2183`	6.4 Medium	Francesco Carlucci	Yes

Showing 1–7 of 7 reports

Latestv1.4.0

WPZOOM Addons for Beaver Builder

Author

WPZOOM

5.0(2)

100/100

Last Updated

2026-08-10 (1mo ago)

Active Installs

4,000+

Downloads

83,886

Requires WP

6.5+

Requires PHP

7.4+

Tested up to

WP 7.1

Created

2018-09-28 (8y ago)

This plugin will extend Beaver Builder with several useful extensions that are missing in the Lite version. Included modules: Slideshow – NEW Team Members Clients Testimonials Food Menu – NEW WooCommerce Products – NEW Buttons Latest Posts Maps Separator, spacer Image Box Special Heading VIEW DEMO You can see multiple pages created using Beaver Builder and our Inspiro theme here

View on WordPress.org