Ultimate Addons for WPBakery

Explore Ultimate Addons for WPBakery vulnerabilities across all versions. Currently tracking 14 known vulnerabilities, including severity, impact, and patch status.

01234567891016.04.2017Today16.04.20179.8Ultimate Addons for WPBakery <= 3.16.11 - Stored Cross-Site Scripting CVSS 9.8 · 16.04.201715.05.20175.4Ultimate Addons for WPBakery <= 3.16.11 - Cross-Site Scripting CVSS 5.4 · 15.05.201719.10.20237.1Ultimate Addons for WPBakery Page Builder <= 3.19.14 - Authenticated(Contributor+) Local File Inclusion CVSS 7.1 · 19.10.20236.4Ultimate Addons for WPBakery Page Builder <= 3.19.14 - Authenticated (Contributor+) Stored Cross-Site Scripting CVSS 6.4 · 19.10.202326.12.20234.3Ultimate Addons for WPBakery <= 3.19.17 - Cross-Site Request Forgery CVSS 4.3 · 26.12.202316.07.20246.4Ultimate Addons for WPBakery Page Builder <= 3.19.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVSS 6.4 · 16.07.20246.4Ultimate Addons for WPBakery Page Builder <= 3.19.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVSS 6.4 · 16.07.20246.4Ultimate Addons for WPBakery Page Builder <= 3.19.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVSS 6.4 · 16.07.20246.4Ultimate Addons for WPBakery Page Builder <= 3.19.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVSS 6.4 · 16.07.20246.4Ultimate Addons for WPBakery Page Builder <= 3.19.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVSS 6.4 · 16.07.202410.10.20256.4Ultimate Addons for WPBakery Page Builder < 3.21.1 - Authenticated (Contributor+) Stored Cross-Site Scripting CVSS 6.4 · 10.10.20256.4Ultimate Addons for WPBakery Page Builder < 3.21.1 - Authenticated (Contributor+) Stored Cross-Site Scripting CVSS 6.4 · 10.10.202502.03.20264.3Ultimate Addons for WPBakery Page Builder <= 3.21.1 - Missing Authorization CVSS 4.3 · 02.03.202601.04.20266.4Ultimate Addons for WPBakery Page Builder < 3.21.4 - Authenticated (Contributor+) Stored Cross-Site Scripting CVSS 6.4 · 01.04.2026

Strategic Overview

Avg CVSSMedium
6.3/ 10
Patch Coverage100%
Open

0

Fixed

14

Get automatic notifications for all Ultimate Addons for WPBakery vulnerabilities before they are exploited.

Vulnerability Records

14 records
2026-04-01 00:00CVE-2026-34889
6.4
Medium
BondsYes
2026-03-02 00:00CVE-2026-28038
4.3
Medium
João Pedro Soares de AlcântaraYes
2025-10-10 00:00CVE-2025-48088
6.4
Medium
stealthcopterYes
2025-10-10 00:00CVE-2025-11814
6.4
Medium
stealthcopterYes
2024-07-16 18:33CVE-2024-5254
6.4
Medium
haidv35Yes
2024-07-16 18:30CVE-2024-5255
6.4
Medium
haidv35Yes
2024-07-16 18:30CVE-2024-5252
6.4
Medium
haidv35Yes
2024-07-16 18:29CVE-2024-5253
6.4
Medium
haidv35Yes
2024-07-16 18:29CVE-2024-5251
6.4
Medium
haidv35Yes
2023-12-26 00:00CVE-2023-51402
4.3
Medium
Rafie MuhammadYes
Showing 1–10 of 14 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C