Link Rendering Vulnerability in Ultimate Addons for WPBakery Page Builder by WPBakery
CVE-2026-14921
Currently unrated
What is CVE-2026-14921?
A link rendering vulnerability exists in the Ultimate Addons for WPBakery Page Builder WordPress plugin prior to version 3.21.5. This vulnerability is related to the shared link-rendering function, 'Ultimate_VC_Addons::uavc_link_init()'. Through this weakness, an attacker may exploit the plugin to manipulate how links are rendered, potentially leading to unauthorized access or execution of malicious code on affected WordPress sites. It is crucial for users to update to the latest version to mitigate this risk.
Affected Version(s)
Ultimate Addons for WPBakery Page Builder 0 < 3.21.5
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.