Skip to content
CVE PROGRAM SOURCE RECORD6.1 Medium

CVE-2026-14921

Ultimate Addons for WPBakery Page Builder < 3.21.5 - Contributor+ Stored XSS via ult_buttons Shortcode

Description

The Ultimate Addons for WPBakery Page Builder WordPress plugin before 3.21.5's shared link-rendering function, Ultimate_VC_Addons::uavc_link_init(),

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown Ultimate Addons for WPBakery Page Builder

Default version status: unaffected

  • 0 to < 3.21.5affected

References