Ultimate Addons for WPBakery Page Builder

Vulnerabilities 15Slug ultimate-vc-addonsPlugin page →

Minimum safe version

3.21.4

Update to 3.21.4 or later to address 15 fixable vulnerabilities

Medium 6.5

2026-04-01< 3.21.4

CVE-2026-34889

CVE Wordfence

Medium 6.5

2026-03-05< 3.21.2

WordPress Ultimate Addons for WPBakery Page Builder plugin <= 3.21.1 - Broken Access Control vulnerability

CVE Wordfence

Medium 6.4

2025-10-16< 3.21.1

CVE-2025-11814

CVE Wordfence

N/A

2025-10-27< 3.21.1

CVE-2025-48088

CVE Patchstack Wordfence

Medium 5.4

2024-07-17< 3.19.20.1

CVE-2024-5252

CVE Wordfence WPScan

Medium 5.4

2024-07-17< 3.19.20.1

CVE-2024-5254

CVE Wordfence WPScan

Medium 5.4

2024-07-17< 3.19.20.1

CVE-2024-5255

CVE Wordfence WPScan

Medium 5.4

2024-07-17< 3.19.20.1

CVE-2024-5253

CVE Wordfence WPScan

Medium 5.4

2024-07-17< 3.19.20.1

CVE-2024-5251

CVE Patchstack Wordfence WPScan

Medium 4.3

2024-12-26< 3.19.18

WordPress Ultimate Addons for WPBakery Page Builder Plugin <= 3.19.17 is vulnerable to Cross Site Request Forgery (CSRF)

Patchstack CVE Wordfence WPScan

High 7.1

2024-05-17< 3.19.15

CVE-2023-46205

CVE Patchstack Wordfence WPScan

Medium 6.5

2023-10-27< 3.19.15

CVE-2023-46211

CVE Patchstack Wordfence WPScan

N/A

2017-04-16< 3.16.12

Ultimate Addons for WPBakery <= 3.16.11 - Stored Cross-Site Scripting

Wordfence

N/A

2017-05-15< 3.16.12

Ultimate Addons for WPBakery <= 3.16.11 - Cross-Site Scripting

Wordfence

N/A

< 3.16.12

Ultimate Addons for Visual Composer < 3.16.12 - Authenticated XSS, CSRF, RCE

WPScan