CVE-2026-18021 | Beaver Builder Page Builder Plugin up to 2.10.3.1 on WordPress Shortcode do_shortcode code injection

SecurityVulns
Yanac

A vulnerability marked as critical has been reported in Beaver Builder Page Builder Plugin up to 2.10.3.1 on WordPress. This affects the function do_shortcode of the component Shortcode Handler. This manipulation causes code injection.

This vulnerability is handled as CVE-2026-18021. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More