https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-5255.htmlhttps://patchthecve.com/cve/CVE-2024-5255.htmlWed, 17 Jun 2026 08:15:32 +0000MEDIUM 6.4: The Ultimate Addons for WPBakery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ultimate_dual_color shortcode in all versions up to, and including, 3.19.20 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possibhttps://patchthecve.com/cve/CVE-2024-5254.htmlhttps://patchthecve.com/cve/CVE-2024-5254.htmlWed, 17 Jun 2026 08:15:32 +0000MEDIUM 6.4: The Ultimate Addons for WPBakery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ultimate_info_banner shortcode in all versions up to, and including, 3.19.20 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possihttps://patchthecve.com/cve/CVE-2024-5253.htmlhttps://patchthecve.com/cve/CVE-2024-5253.htmlWed, 17 Jun 2026 08:15:32 +0000MEDIUM 6.4: The Ultimate Addons for WPBakery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ult_team shortcode in all versions up to, and including, 3.19.20 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authhttps://patchthecve.com/cve/CVE-2024-5252.htmlhttps://patchthecve.com/cve/CVE-2024-5252.htmlWed, 17 Jun 2026 08:15:32 +0000MEDIUM 6.4: The Ultimate Addons for WPBakery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ultimate_info_table shortcode in all versions up to, and including, 3.19.20 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possibhttps://patchthecve.com/cve/CVE-2024-5251.htmlhttps://patchthecve.com/cve/CVE-2024-5251.htmlWed, 17 Jun 2026 08:15:32 +0000MEDIUM 6.4: The Ultimate Addons for WPBakery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ultimate_pricing shortcode in all versions up to, and including, 3.19.20 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possiblehttps://patchthecve.com/cve/CVE-2023-51402.htmlhttps://patchthecve.com/cve/CVE-2023-51402.htmlWed, 17 Jun 2026 06:40:53 +0000MEDIUM 4.3: Cross-Site Request Forgery (CSRF) vulnerability in Brain Storm Force Ultimate Addons for WPBakery Page Builder.This issue affects Ultimate Addons for WPBakery Page Builder: from n/a through 3.19.17.https://patchthecve.com/cve/CVE-2023-46211.htmlhttps://patchthecve.com/cve/CVE-2023-46211.htmlWed, 17 Jun 2026 06:30:21 +0000MEDIUM 6.5: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Brainstorm Force Ultimate Addons for WPBakery Page Builder plugin <= 3.19.14 versions.