WordPress - Beaver Builder Page Builder – Drag And Drop Website Builder - CRITICAL - CVE-2026-92084. The Beaver Builder Page Builder plugin for WordPress contains a vulnerability that permits unauthenticated attackers to execute arbitrary shortcodes. This flaw arises from insufficient validation of values prior to processing do_shortcode, notably within pages that leverage the Sidebar module. Attackers can exploit this by embedding their own text in a widget, which can lead to the execution of unauthorized commands if comment moderation settings are improperly configured.