Executive brief
Ultimate Addons for Beaver Builder is a popular WordPress plugin used to extend the capabilities of the Beaver Builder page editor. A security flaw in its social media login feature allows an attacker to log in as any user, including administrators, without knowing their password. This could lead to a complete takeover of the website, allowing attackers to steal data, modify content, or install malicious software.
Technical details
An authentication bypass vulnerability exists in Ultimate Addons for Beaver Builder versions prior to 1.2.4.1 due to an insecure implementation of the social media login feature. The vulnerability is located in the 'uabb-lf-google-submit' AJAX action within the admin-ajax.php endpoint. An unauthenticated attacker can exploit this by sending a specially crafted POST request containing a valid administrator's email address and a valid nonce (which can be retrieved from the public-facing login page). Successful exploitation allows the attacker to obtain valid session cookies for the targeted user, leading to full account takeover. The issue is classified as CWE-288 (Authentication Bypass Using an Alternate Path or Channel).
Affected products
- Ultimatebeaver Ultimate Addons for Beaver Builder < 1.2.4.1
Timeline
- 2019-12-21: other: Exploit developed
- 2019-12-31: disclosed: Public exploit published on Exploit-DB
- 2026-06-20: advisory: NVD/VulnCheck advisory published