Skip to content
OpenAdvisories
Medium · 6.5 CVE-2026-28038 EUVD-2026-9700GHSA-29qh-jw3j-7gwj

WordPress Ultimate Addons for WPBakery Page Builder plugin <= 3.21.1 - Broken Access Control vulnerability

Published Mar 5, 2026 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Missing Authorization vulnerability in Brainstorm_Force Ultimate Addons for WPBakery Page Builder ultimate_vc_addons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ultimate Addons for WPBakery Page Builder: from n/a through <= 3.21.1.

Affected products

VendorProductAffectedFixed
Brainstorm_Force Ultimate Addons for WPBakery Page Builder ≤ 3.21.1 —

References