Ultimate Addons for WPBakery Page Builder
ultimate_vc_addons · plugin
Known security vulnerabilities for Ultimate Addons for WPBakery Page Builder. Find out in seconds which version runs on your site with WP Lens.
7 known vulnerabilities
latest Apr 1, 2026
Vulnerabilities
- High 8.8
WordPress Ultimate Addons for WPBakery Page Builder Plugin <= 3.19.17 is vulnerable to Cross Site Request Forgery (CSRF)
- High 7.1
WordPress Ultimate Addons for WPBakery Page Builder plugin <= 3.19.14 - Local File Inclusion vulnerability
- Medium 6.5
CVE-2026-34889→ 3.21.4
WordPress Ultimate Addons for WPBakery Page Builder plugin < 3.21.4 - Cross Site Scripting (XSS) vulnerability
- Medium 6.5
WordPress Ultimate Addons for WPBakery Page Builder plugin <= 3.21.1 - Broken Access Control vulnerability
- Medium 6.5
WordPress Ultimate Addons for WPBakery Page Builder plugin < 3.21.1 - Cross Site Scripting (XSS) vulnerability
- Medium 6.4
CVE-2025-11814→ 3.21.1
Ultimate Addons for WPBakery Page Builder < 3.21.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
- Medium 5.4
WordPress Ultimate Addons for WPBakery Page Builder Plugin <= 3.19.14 is vulnerable to Cross Site Scripting (XSS)