A vulnerability, which was classified as problematic, has been found in Beaver Builder Plugin up to 2.9.4 on WordPress. This affects an unknown function of the file fl-controls/v1. Performing manipulation results in missing authorization.

This vulnerability is reported as CVE-2025-11726. The attack is possible to be carried out remotely. No exploit exists.