Advisories · Technology
Ultimate Addons for WPBakery Page Builder.
Every CVE that names Ultimate Addons for WPBakery Page Builder among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.1 Medium
Ultimate Addons for WPBakery Page Builder < 3.21.5 - Contributor+ Stored XSS via ult_buttons Shortcode
- Ultimate Addons for WPBakery Page Builder
- Cross-site scripting (XSS)
- CVSS 6.5 Medium
Ultimate Addons for WPBakery Page Builder < 3.21.4 - Unauthenticated Custom Icon Font Deletion via delete-bsf-fonts
- Ultimate Addons for WPBakery Page Builder
- Path traversal