Approved changes feed: RSS · Atom

cpe:2.3:a:brainstorm_force:ultimate_addons_for_wpbakery_page_builder:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorBrainstorm Force (ed596997-4e58-5bba-8739-dbf2a1ffb70e)
ProductUltimate Addons For Wpbakery Page Builder (515f26be-031e-54a7-83fb-ba3a22ee292b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-34889 vulnerable 2026-06-03 15:22:11.055188 WordPress Ultimate Addons for WPBakery Page Builder plugin < 3.21.4 - Cross Site Scripting (XSS) vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force Ultimate Addons for WPBakery Page Builder allows DOM-Based XSS.This issue affects Ultimate Addons for WPBakery Page Builder: from n/a before 3.21.4.
Published: 2026-04-01T08:51:32.192Z
Updated: 2026-04-01T13:29:40.506Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-28038 vulnerable 2026-06-03 15:18:07.910717 WordPress Ultimate Addons for WPBakery Page Builder plugin <= 3.21.1 - Broken Access Control vulnerability
MEDIUM (6.5)
Missing Authorization vulnerability in Brainstorm_Force Ultimate Addons for WPBakery Page Builder ultimate_vc_addons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ultimate Addons for WPBakery Page Builder: from n/a through <= 3.21.1.
Published: 2026-03-05T05:54:14.595Z
Updated: 2026-04-28T17:32:37.827Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-48088 vulnerable 2026-06-03 15:01:34.099682 WordPress Ultimate Addons for WPBakery Page Builder plugin < 3.21.1 - Cross Site Scripting (XSS) vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm_Force Ultimate Addons for WPBakery Page Builder ultimate_vc_addons allows Stored XSS.This issue affects Ultimate Addons for WPBakery Page Builder: from n/a through < 3.21.1.
Published: 2025-10-27T02:09:52.224Z
Updated: 2026-04-28T16:12:50.403Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-46211 vulnerable 2026-06-03 14:53:09.366121 WordPress Ultimate Addons for WPBakery Page Builder Plugin <= 3.19.14 is vulnerable to Cross Site Scripting (XSS)
MEDIUM (6.5)
Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Brainstorm Force Ultimate Addons for WPBakery Page Builder plugin <= 3.19.14 versions.
Published: 2023-10-27T20:22:57.184Z
Updated: 2026-04-28T16:08:46.634Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-46205 vulnerable 2026-06-03 14:53:09.352467 WordPress Ultimate Addons for WPBakery Page Builder plugin <= 3.19.14 - Local File Inclusion vulnerability
HIGH (7.1)
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Brainstorm Force Ultimate Addons for WPBakery Page Builder allows PHP Local File Inclusion.This issue affects Ultimate Addons for WPBakery Page Builder: from n/a through 3.19.14.
Published: 2024-05-17T08:34:21.145Z
Updated: 2026-04-28T16:08:46.102Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.