Ultimate Addons for WPBakery Page Builder vulnerabilities

Product

Ultimate Addons for WPBakery Page Builder

by Brainstorm_Force · last CVE Apr 1, 2026

CVEs

On KEV

6.5

Max CVSS

New 30D

Severity mix

Critical 0High 0Medium 2Low 0

Severity

Exploitation

Watch

Add Ultimate Addons for WPBakery Page Builder to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-34889	6.5	0%	Apr 1	WordPress Ultimate Addons for WPBakery Page Builder plugin < 3.21.4 - Cross Site Scripting (XSS) vulnerability Affected: before 3.21.4
CVE-2026-28038	6.5	0%	Mar 5	WordPress Ultimate Addons for WPBakery Page Builder plugin <= 3.21.1 - Broken Access Control vulnerability Affected: through 3.21.1