What’s Vulnerable › Products

Ultimate Addons for WPBakery Page Builder vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your Ultimate Addons for WPBakery Page Builder version is affected

Latest Ultimate Addons for WPBakery Page Builder vulnerabilities

• CVE-2026-14921 — Ultimate Addons for WPBakery Page Builder < 3.21.5 - Contributor+ Stored XSS via ult_buttons Shortcode (CVSS 6.1)
• CVE-2026-15382 — Ultimate Addons for WPBakery Page Builder < 3.21.4 - Unauthenticated Custom Icon Font Deletion via delete-bsf-fonts (CVSS 6.5)