Beaver Builder Page Builder <= 2.11.0.5 - Authenticated (Contributor+) SQL Injection via 'fields[][value]' Parameter

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-95865 · Microsoft / collected KEV context

cve-program · CVE-2026-95865

• https://www.wordfence.com/threat-intel/vulnerabilities/id/1dfb9957-1326-474d-94bc-3472901c112b?source=cve
• https://plugins.trac.wordpress.org/browser/beaver-builder-lite-version/tags/2.11.0.5/classes/class-fl-builder-auto-suggest.php#L173
• https://plugins.trac.wordpress.org/browser/beaver-builder-lite-version/tags/2.11.0.5/classes/class-fl-builder-auto-suggest.php#L167
• https://plugins.trac.wordpress.org/browser/beaver-builder-lite-version/tags/2.11.0.5/classes/class-fl-builder-ajax.php#L241
• https://plugins.trac.wordpress.org/browser/beaver-builder-lite-version/tags/2.11.0.5/classes/class-fl-builder-ajax.php#L151
• https://plugins.trac.wordpress.org/browser/beaver-builder-lite-version/tags/2.11.0.5/classes/class-fl-builder-wp-blocks.php#L69
• https://plugins.trac.wordpress.org/changeset/3713226/beaver-builder-lite-version/tags/2.11.0.6/classes/class-fl-builder-auto-suggest.php

No related operational record is retained in the current change model.