SecAlerts
ultimate addons logo

ultimate addons

Security Risk Profile

32
/100
low

Security Risk Score

Comprehensive risk assessment based on 9 vulnerabilities, EPSS scores, exploitation status, and remediation availability.

📅 Data spans from March 30, 2024 to present

9
Total CVEs
1
Critical+High
0
Exploited
1
Unpatched

Threat Assessment

Avg CVSS
6
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
1
Critical/High
Risk Level
32/100
low

Severity Distribution

Critical
0
High
1
Medium
8
Low
0

Exploit Likelihood

>50% chance
0
20-50%
0
5-20%
0
<5%
3

Age Distribution

Common Weaknesses (CWE)

1
XSS
7
2
Malicious File Upload
1

Most Affected Products

1. Brainstormforce Ultimate Addons For Beaver Builder Wordpress5
2. Ultimate Addons Ultimate Addons for Beaver Builder – Lite3
3. Ultimate Addons Ultimate Addons for Elementor2
4. Ultimate Addons Beaver Builder – Lite2
5. Ultimate Addons WPBakery1

Recent Vulnerabilities

See more →
CVE-2025-11814
CVSS 6.4medium

Ultimate Addons for WPBakery Page Builder < 3.21.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

10/16/2025🔧 No Patch
CVE-2025-9703
CVSS 4.3EPSS 0%medium

Ultimate Addons for Elementor Lite < 2.5.0 - Author+ Stored XSS

10/6/2025🔧 No Patch
CVE-2025-8488
CVSS 4.3EPSS 0%medium

Ultimate Addons for Elementor (Formerly Elementor Header & Footer Builder) <= 2.4.6 - Missing Authorization to Authenticated (Subscriber+) Limited Settings Update

8/2/2025🔧 No Patch
CVE-2025-6220
CVSS 7.2EPSS 0%high

Ultimate Addons for Contact Form 7 <= 3.5.12 - Authenticated (Administrator+) Arbitrary File Upload via 'save_options'

6/18/2025🔧 No Patch
CVE-2024-2140
CVSS 6.4medium

Ultimate Addons for Beaver Builder – Lite <= 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Advanced Icons Widget

3/30/2024
CVE-2024-2142
CVSS 6.4medium

Ultimate Addons for Beaver Builder – Lite <= 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Info Table Widget

3/30/2024
CVE-2024-2141
CVSS 6.4medium

Ultimate Addons for Beaver Builder – Lite <= 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Widget

3/30/2024
CVE-2024-2143
CVSS 6.4medium

Ultimate Addons for Beaver Builder – Lite <= 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Heading Widget

3/30/2024
CVE-2024-2144
CVSS 6.4medium

Ultimate Addons for Beaver Builder – Lite <= 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Separator Widget

3/30/2024

Monitor ultimate addons in Real-Time

Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.

Powered bySecAlerts

Monitor Your Software Stack in Real-Time

Get instant alerts when vulnerabilities are discovered in your software stack. Stay ahead of security threats with SecAlerts.

© 2026 SecAlerts Pty Ltd. All rights reserved.