PT-2026-29500 · Brainstorm Force+1 · Ultimate Addons For Wpbakery Page Builder+1

Bonds · Published 2026-04-01 · Updated 2026-04-01 · CVE-2026-34889

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Brainstorm Force Ultimate Addons for WPBakery Page Builder versions prior to 3.21.4

Description Brainstorm Force Ultimate Addons for WPBakery Page Builder is susceptible to a DOM-Based Cross-Site Scripting (XSS) issue due to improper neutralization of input during web page generation. This allows for potential malicious code execution within the context of a user's browser.

Recommendations Update Brainstorm Force Ultimate Addons for WPBakery Page Builder to version 3.21.4 or later.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2026-34889

Affected Products

Ultimate Addons For Wpbakery Page Builder

Wpbakery Page Builder

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-34889 · Security Note
• https://twitter.com/VulmonFeeds/status/2039357574688977233 · Twitter Post
• https://patchstack.com/database/wordpress/plugin/ultimate_vc_addons/vulnerability/wordpress-ultimate-addons-for-wpbakery-page-builder-plugin-3-21-4-cross-site-scripting-xss-vulnerability?_s_id=cve · Note
• https://twitter.com/CVEnew/status/2039279627466871119 · Twitter Post