WordPress Ultimate Addons for WPBakery Page Builder plugin < 3.21.4 - Unauthenticated Custom Icon Font Deletion vulnerability

Unauthenticated Custom Icon Font Deletion vulnerability discovered by Trần Tiến in WordPress Plugin Ultimate Addons for WPBakery Page Builder versions 3.21.4...

CVE-2026-15382

The Ultimate Addons for WPBakery Page Builder WordPress plugin, in versions before 3.21.4 , is vulnerable to an unauthenticated custom icon font deletion. The root cause is the failure to perform capability or nonce checks before processing requests to delete custom-uploaded icon font packs. An u...

WordPress Borderless plugin <= 1.5.9 - Missing Authorization to Icon Font Deletion vulnerability

Missing Authorization to Icon Font Deletion vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin Borderless versions = 1.5.9...