Cross-Site Scripting Vulnerability in Ultimate Addons for WPBakery Page Builder by Brainstorm Force

CVE-2026-34889

What is CVE-2026-34889?

A Cross-Site Scripting (XSS) vulnerability has been identified in the Ultimate Addons for WPBakery Page Builder, which can be exploited due to improper neutralization of user input during dynamic web page generation. This flaw specifically impacts versions prior to 3.21.4, allowing attackers to inject malicious scripts into web pages viewed by unsuspecting users. Such vulnerabilities can lead to unauthorized data access, session hijacking, and other security breaches. It is crucial for users of affected versions to update promptly to mitigate these risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References