Skip to content
PluginCanary

Beaver Builder Page Builder - Drag and Drop Website Builder

by Beaver Builder · 100,000+ active installs · Checked 3 Nov 2026
Healthy4 Warnings

Healthy: vulnerability published 2 Oct 2026, fixed in 2.11.0.6.

83/ 100 Canary Score
Sub-scores for Beaver Builder Page Builder - Drag and Drop Website Builder
Ownership100
Maintenance100
Security60
Support80
Reputation70

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningSEC-1Vulnerability published 2 Oct 2026, fixed in 2.11.0.6. Update to version 2.11.0.6 or later.2 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 2 Oct 2026, fixed in 2.11.0.6. Update to version 2.11.0.6 or later.2 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 7 Sep 2026, fixed in 2.10.3.2. Update to version 2.10.3.2 or later.7 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 14 Aug 2026, fixed in 2.10.3.2. Update to version 2.10.3.2 or later.14 Aug 2026Evidence
  • InfoSEC-315 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
pross28 Jul 2017 to 19 Oct 2026, 287 commits

1 committer recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
15 days ago
Releases, 24 months
21
Tested up to
7.1 current
Requires PHP
7.4 supported 8.2+
Releases per quarter for Beaver Builder Page Builder - Drag and Drop Website Builder
Q1 20245
Q2 20245
Q3 20246
Q4 20246
Q1 20251
Q2 20253
Q3 20253
Q4 20253
Q1 20262
Q2 20262
Q3 20264
Q4 20261

Last release 19 Oct 2026. Tested with WordPress 7.1 (current).

Support

80% of 5 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
2 Oct 2026Beaver Builder Page Builder <= 2.11.0.5 - Unauthenticated Arbitrary Shortcode Execution via Sidebar Module Widget Output9.1<= 2.11.0.52.11.0.60
2 Oct 2026Beaver Builder Page Builder <= 2.11.0.5 - Authenticated (Contributor+) SQL Injection via 'fields[][value]' Parameter6.5<= 2.11.0.52.11.0.60
7 Sep 2026Beaver Builder Page Builder <= 2.10.3.1 - Unauthenticated Arbitrary Shortcode Execution6.5<= 2.10.3.12.10.3.20
14 Aug 2026Beaver Builder Page Builder <= 2.10.2.2 - Authenticated (Author+) Stored Cross-Site Scripting via Button Module 'button' Parameter6.4<= 2.10.2.22.10.3.20
7 Apr 2026Beaver Builder Page Builder – Drag and Drop Website Builder <= 2.10.1.1 - Authenticated (Author+) Stored Cross-Site Scripting via 'settings[js]'6.4<= 2.10.1.12.10.1.20
23 Mar 2026Beaver Builder <= 2.10.1.2 - Authenticated (Contributor+) SQL Injection6.5<= 2.10.1.22.10.1.515
10 Feb 2026Beaver Builder Page Builder – Drag and Drop Website Builder <= 2.10.0.5 - Authenticated (Custom+) Missing Authorization to Stored Cross-Site Scripting via Global Settings6.4<= 2.10.0.52.10.0.60
21 Jan 2026Beaver Builder <= 2.9.4.1 - Authenticated (Contributor+) Remote Code Execution8.8<= 2.9.4.12.9.4.20
22 Dec 2025Beaver Builder – WordPress Page Builder <= 2.9.4.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Update8.1<= 2.9.4.12.9.4.21
8 Dec 2025Beaver Builder – WordPress Page Builder <= 2.9.4 - Authenticated (Contributor+) Sensitive Information Exposure4.3<= 2.9.42.9.4.10
3 Dec 2025Beaver Builder – WordPress Page Builder <= 2.9.4 - Missing Authorization to Authenticated (Contributor+) Builder Status Tampering4.3<= 2.9.42.9.4.10
1 Dec 2025Beaver Builder – WordPress Page Builder <= 2.9.4 - Missing Authorization to Authenticated (Contributor+) Global Preset Modification4.3<= 2.9.42.9.4.10
27 Aug 2025Beaver Builder Plugin (Lite Version) <= 2.9.2.1 - Reflected Cross-Site Scripting6.1<= 2.9.2.12.9.3.10
12 Dec 2024Beaver Builder – WordPress Page Builder <= 2.8.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 2.8.4.42.8.5.30
2 Dec 2024Beaver Builder <= 2.8.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 2.8.4.32.8.4.40
29 Oct 2024Beaver Builder – WordPress Page Builder <= 2.8.4.2 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Button Widget6.4<= 2.8.4.22.8.4.30
24 Oct 2024Beaver Builder <= 2.8.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 2.8.3.72.8.3.90
26 Sep 2024Beaver Builder – WordPress Page Builder <= 2.8.3.6 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Button Group Module6.4<= 2.8.3.62.8.3.70
28 Aug 2024Beaver Builder (Lite Version) <= 2.8.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via type Parameter6.4<= 2.8.3.52.8.3.61
26 Aug 2024Beaver Builder <= 2.8.3.2 - Reflected Cross-Site Scripting6.1<= 2.8.3.22.8.3.40
4 Jul 2024Beaver Builder <= 2.8.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 2.8.2.22.8.3n/a
10 May 2024Beaver Builder <= 2.8.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via photo widget crop attribute6.4<= 2.8.1.22.8.1.30
7 May 2024Beaver Builder – WordPress Page Builder <= 2.8.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 2.8.1.12.8.1.20
1 Apr 2024Beaver Builder – WordPress Page Builder <= 2.8.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button6.4<= 2.8.0.52.8.0.71
28 Mar 2024Beaver Builder <= 2.7.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 2.7.4.42.7.4.50

Source: Wordfence Intelligence.

Reputation

Average rating per quarter for Beaver Builder Page Builder - Drag and Drop Website Builder
Q4 20231.0
Q1 20243.0
Q2 20245.0
Q3 20245.0
Q4 20245.0
Q1 20253.7
Q2 20255.0
Q3 20255.0
Q4 20255.0
Q1 20265.0
Q2 20265.0
Q3 20265.0

Average rating rose from 1.0 to 5.0 between Q4 2023 and Q3 2026.

Rating distribution
5 star361
4 star6
3 star3
2 star7
1 star17
Latest low reviews

Momentum

100,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Beaver Builder Page Builder - Drag and Drop Website Builder
4 May 20266,457
11 May 202611,514
18 May 202612,880
25 May 202611,332
1 Jun 20268,445
8 Jun 202667,105
15 Jun 202613,996
22 Jun 202612,984
29 Jun 202611,654
6 Jul 202614,616
13 Jul 202611,514
20 Jul 202612,016
27 Jul 202613,748
3 Aug 202612,539
10 Aug 202666,740
17 Aug 202619,398
24 Aug 202612,935
31 Aug 202611,111
7 Sep 2026123,715
14 Sep 202617,932
21 Sep 202668,457
28 Sep 202616,853
5 Oct 202616,935
12 Oct 202611,028
19 Oct 202668,299
26 Oct 202616,790
2 Nov 20261,688

Weekly downloads over the last 4 weeks are 2% below the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

Fusion Page BuilderScore 87 · 3,000+SKT Page BuilderScore 87 · 2,000+Landing Page Builder - Coming Soon page, Maintenance Mode, Lead Page, WordPress Landing PagesScore 86 · 8,000+

Facts

Version2.11.1.2
AuthorBeaver Builder
Added4 Nov 2014
Last updated19 Oct 2026
Active installs100,000+
Requires WordPress6.8
Tested up to7.1.4
Requires PHP7.4
CategoryDesign & Themes > Page Builders & Visual Editors
Tagslanding page, page builder, beaver builder, front-end builder, Drag And Drop editor

Other plugins by this author: Customizer Export/Import, Assistant - Every Day Productivity Apps

Questions

Is Beaver Builder Page Builder - Drag and Drop Website Builder still maintained?

Beaver Builder Page Builder - Drag and Drop Website Builder was last updated on 19 Oct 2026. Its Canary status is Healthy.

Is Beaver Builder Page Builder - Drag and Drop Website Builder safe?

Beaver Builder Page Builder - Drag and Drop Website Builder has no open unpatched vulnerabilities on record. 15 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns Beaver Builder Page Builder - Drag and Drop Website Builder?

The wordpress.org author is Beaver Builder. Recent committers: pross, justinbusa, plugin-master. We have recorded no ownership change.

What can I use instead of Beaver Builder Page Builder - Drag and Drop Website Builder?

Plugins in the same category with a higher Canary Score: Fusion Page Builder, SKT Page Builder, Landing Page Builder - Coming Soon page, Maintenance Mode, Lead Page, WordPress Landing Pages.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue