Sensitive Information Exposure in Beaver Builder WordPress Page Builder Plugin

CVE-2025-12558

What is CVE-2025-12558?

The Beaver Builder – WordPress Page Builder plugin for WordPress has a vulnerability that allows authenticated users with Contributor-level access or higher to exploit the 'get_attachment_sizes' function. This vulnerability exposes sensitive information such as the path and metadata of private attachments. This could potentially lead to unauthorized access and viewing of confidential data, highlighting a significant concern for data privacy and security within affected versions.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References