What is the CVSS score of CVE-2025-69319?

CVE-2025-69319 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Which versions of Beaver Builder Beaver Builder are affected by CVE-2025-69319?

A code injection vulnerability in Beaver Builder (versions up to 2.9.4.1) allows attackers to execute arbitrary code on affected websites, potentially compromising site integrity and visitor data.

How to fix or mitigate CVE-2025-69319?

Within 24 hours: Identify all WordPress installations using Beaver Builder and document current versions; disable the plugin on non-critical sites if feasible. Within 7 days: Contact Beaver Builder support for patch timeline; implement WAF rules to detect code injection attempts; restrict administrative access to page builder functionality. Within 30 days: Apply patch immediately upon release; conduct security audit of affected sites for signs of compromise; review access logs for exploitation attempts.

Beaver Builder Beaver Builder CVE-2025-69319

HIGH

Code Injection (CWE-94)

2026-01-22 audit@patchstack.com

Code Injection

7.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.5 HIGH

AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

High

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:54 vuln.today

CVE Published

Jan 22, 2026 - 17:16 nvd

HIGH 7.5

DescriptionCVE.org

Improper Control of Generation of Code ('Code Injection') vulnerability in Beaver Builder Beaver Builder beaver-builder-lite-version allows Code Injection.This issue affects Beaver Builder: from n/a through <= 2.9.4.1.

AnalysisAI

Technical ContextAI

Classified as CWE-94 (Code Injection). Affects Beaver Builder Beaver Builder beaver-builder-lite-version. Improper Control of Generation of Code ('Code Injection') vulnerability in Beaver Builder Beaver Builder beaver-builder-lite-version allows Code Injection.This issue affects Beaver Builder: from n/a through <= 2.9.4.1.