The vulnerability CVE-2026-32395 affects Xpro Addons For Beaver Builder – Lite versions up to 1.5.6. It is caused by missing authorization checks, resulting in incorrectly configured access control security levels. This allows an unauthenticated attacker to perform unauthorized actions that affect the integrity of the system. The CVSS 3.1 base score is 5.3 (medium), reflecting network attack vector, low attack complexity, no privileges required, no user interaction, and impact limited to integrity. No patch or vendor advisory is currently available to confirm remediation status.

The impact is limited to integrity, meaning an attacker could modify or manipulate data or functionality without authorization. There is no impact on confidentiality or availability. The vulnerability can be exploited remotely without authentication or user interaction, increasing the risk of unauthorized integrity modifications.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, review and tighten access control configurations where possible to limit exposure. Monitor for updates from the vendor or security advisories regarding patches or mitigations.