Really Simple Security logo

Log out
Get PRO

Latest

Input validation vulnerability in Ultimate Addons for WPBakery 3.16.11

  • Severity: critical
  • Status: Fixed
  • Publication: April 16, 2017

The Ultimate Addons for WPBakery plugin for WordPress is vulnerable to a type of security issue called Stored Cross-Site Scripting. This means that in versions 3.16.11 and earlier, a low-level user with access to the plugin could add malicious web scripts to certain administrative pages. These scripts would then execute every time the page is viewed by any user, potentially allowing the user to do damage.

Detected in:

Ultimate Addons for WPBakery fixed vulnerable versions: >= * <= 3.16.11

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.