A vulnerability classified as problematic has been found in Beaver Builder Plugin up to 2.9.4 on WordPress. Impacted is the function
get_attachment_sizes. This manipulation causes information disclosure.
This vulnerability is handled as CVE-2025-12558. The attack can be initiated remotely. There is not any exploit available.
