CVE-2019-25763

CRITICAL

WordPress Ultimate Addons for Beaver Builder 1.2.4.1 Authentication Bypass

Title source: CVE List
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2019-25763 has a selected CVSS score of 9.3 (critical); EIP currently links 1 catalogued exploit.

Description

WordPress Ultimate Addons for Beaver Builder 1.2.4.1 contains an authentication bypass vulnerability that allows attackers to gain unauthorized access by exploiting the social media login form functionality. Attackers can submit a POST request to the admin-ajax.php endpoint with the uabb-lf-google-submit action, a valid administrator email address, and a valid nonce to obtain session cookies and authenticate as that user.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

CISA SSVC decision

ExploitationPoC
AutomatableYes
Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated Jun 22, 2026 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

Ultimate Addons for Beaver Builder

Browse Ultimatebeaver / Ultimate Addons for Beaver Builder

Default status: unaffected

CVE ListThrough 1.2.4.1affected

Proofs of concept

1

Catalogued exploits

ExploitDBWordPress Plugin Ultimate Addons for Beaver Builder 1.2.4.1 - Authentication BypassExploitDB exploitby Raphael KargerNot analyzed1 file
ExploitDB
PoC details

References

4