Plugin icon

Ultimate Addons for WPBakery Page Builder

Ultimate_VC_Addons

Vulnerabilities:

12

Last Updated:

March 10, 2026

Active Installs:

n/a

Published
Title
Fixed in
CVSS
Published
2026-03-02
Title
Ultimate Addons for WPBakery Page Builder <= 3.21.1 - Missing Authorization
Fixed in
No known fix
CVSS
4.3 (medium)
Published
2025-10-10
Title
Ultimate Addons for WPBakery Page Builder < 3.21.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 3.21.1
CVSS
6.4 (medium)
Published
2025-10-10
Title
Ultimate Addons for WPBakery Page Builder < 3.21.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 3.21.1
CVSS
6.4 (medium)
Published
2024-07-16
Title
Ultimate Addons for WPBakery Page Builder < 3.19.20.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Fixed in
Fixed in 3.19.20.1
CVSS
6.4 (medium)
Published
2024-07-16
Title
Ultimate Addons for WPBakery Page Builder < 3.19.20.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Fixed in
Fixed in 3.19.20.1
CVSS
6.4 (medium)
Published
2024-07-16
Title
Ultimate Addons for WPBakery Page Builder < 3.19.20.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Fixed in
Fixed in 3.19.20.1
CVSS
6.4 (medium)
Published
2024-07-16
Title
Ultimate Addons for WPBakery Page Builder < 3.19.20.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Fixed in
Fixed in 3.19.20.1
CVSS
6.4 (medium)
Published
2024-07-16
Title
Ultimate Addons for WPBakery Page Builder < 3.19.20.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Fixed in
Fixed in 3.19.20.1
CVSS
6.4 (medium)
Published
2023-12-26
Title
Ultimate Addons for WPBakery < 3.19.18 - Cross-Site Request Forgery
Fixed in
Fixed in 3.19.18
CVSS
4.3 (medium)
Published
2023-10-19
Title
Ultimate Addons for WPBakery Page Builder < 3.19.15 - Contributor+ Stored XSS
Fixed in
Fixed in 3.19.15
CVSS
5.9 (medium)
Published
2023-10-19
Title
Ultimate Addons for WPBakery Page Builder < 3.19.15 - Authenticated(Contributor+) Local File Inclusion
Fixed in
Fixed in 3.19.15
CVSS
7.1 (high)
Published
2017-05-15
Title
Ultimate Addons for Visual Composer < 3.16.12 - Authenticated XSS, CSRF, RCE
Fixed in
Fixed in 3.16.12
CVSS
9.9 (critical)