CVE-2026-3897

The Livemesh Addons for Beaver Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `labb_admin_ajax` AJAX action in all versions up to, and including, 3.9.2 due to missing authorization checks and insufficient input sanitization. The AJAX handler verifies a nonce but does not check user capabilities. This makes it possible for authenticated attackers with Subscriber-level access and above to modify plugin settings and inject malicious scripts that execute when administrators access the plugin settings page or when any user visits the frontend.

• CWE-862

• https://plugins.trac.wordpress.org/browser/addons-for-beaver-builder/tags/3.9.2/admin/admin-ajax.php#L64
• https://plugins.trac.wordpress.org/browser/addons-for-beaver-builder/tags/3.9.2/admin/views/settings.php#L137
• https://plugins.trac.wordpress.org/browser/addons-for-beaver-builder/tags/3.9.2/includes/helper-functions.php#L248
• https://www.wordfence.com/threat-intel/vulnerabilities/id/8bc41c61-1d8a-445f-bd70-3b14a40c89d4?source=cve

Published

May 27, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-3895The WPBakery Page Builder Addons by Livemesh plugin for Word…6.4
• CVE-2026-38950An issue in ESA AnomalyMatch before 1.3.1 allow attackers to…7.8
• CVE-2026-3896The Livemesh SiteOrigin Widgets plugin for WordPress is vuln…6.4
• CVE-2026-38967CrowCpp Crow through v1.3.1 HTTP is vulnerable to response h…9.8
• CVE-2026-38968ntopng through 6.6 is vulnerable to Predictable Session Iden…9.8
• CVE-2026-38969Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: non…
• CVE-2026-38970pdfcpu through v0.11.1 contains an uncontrolled-recursion de…7.5
• CVE-2026-38971ardupilot through Plane-4.6.3 was found to contain an out-of…9.1
• CVE-2026-38972Notepad3 through 6.25.822.1 contains a DLL search-order hija…7.8
• CVE-2026-38973mrubyc through release3.4.1 was found to contain an out-of-b…4.4
• CVE-2026-38974Dulwich through 1.1.0 was found to be missing SSH host key v…5.3
• CVE-2026-38976mrubyc through 3.4.1 was found to contain a NULL pointer der…7.5