CVE-2023-51402

CVE-2023-51402 is a CSRF vulnerability in Brain Storm Force Ultimate Addons for WPBakery Page Builder, affecting Ultimate Addons for WPBakery Page Builder up to version 3.19.17. Source mentions Cross-Site Request Forgery but does not provide exploitation details or a confirmed patch. No public re...

CVE-2023-46211

CVE-2023-46211 is a stored Cross-Site Scripting (XSS) vulnerability in the Brainstorm Force Ultimate Addons for WPBakery Page Builder plugin, affected versions

CVE-2024-5251

CVE-2024-5251 describes a Stored Cross-Site Scripting vulnerability in Ultimate Addons for WPBakery Page Builder (WordPress). The issue affects all versions up to and including 3.19.20, caused by insufficient input sanitization and output escaping in the ultimate_pricing shortcode attributes. Exp...

CVE-2024-5252

CVE-2024-5252 affects Ultimate Addons for WPBakery Page Builder. It is a Stored XSS via the ultimate_info_table shortcode in all versions up to and including 3.19.20, exploitable by authenticated attackers with Contributor+ access to inject scripts on pages viewed by users. Remediation: upgrade t...

CVE-2024-5253

The CVE-2024-5253 issue affects Ultimate Addons for WPBakery Page Builder (WordPress) up to and including version 3.19.20, where Stored XSS can be triggered via the ult_team shortcode due to insufficient input sanitization and output escaping. Exploitation requires authenticated access at Contrib...

CVE-2024-5254

CVE-2024-5254 concerns the Ultimate Addons for WPBakery Page Builder plugin for WordPress. The vulnerability is Stored Cross-Site Scripting via the ultimate_info_banner shortcode in all versions up to and including 3.19.20, caused by insufficient input sanitization and output escaping on user-sup...

CVE-2024-5255

CVE-2024-5255 affects Ultimate Addons for WPBakery Page Builder, vulnerable in all versions up to and including 3.19.20. The issue is Stored Cross-Site Scripting via the plugin’s ultimate_dual_color shortcode caused by insufficient input sanitization and output escaping on user-supplied attribute...