What is CVE-2026-15382?

CVE-2026-15382 is a medium-severity vulnerability in Ultimate Addons For Wpbakery Page Builder, classified under External Control of File Name or Path. CVSS score: 6.5/10. Published 2026-07-30.

How severe is CVE-2026-15382?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Vulnerability in Ultimate Addons For Wpbakery Page Builder

CVE-2026-15382

The Ultimate Addons for WPBakery Page Builder WordPress plugin before 3.21.4 does not perform a capability or nonce check before deleting a site's custom-uploaded icon font packs, allowing unauthenticated attackers to permanently delete al…

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L.

Affected products

Unknown Ultimate Addons For Wpbakery Page Builder — versions 0

Weakness classification (CWE)

CWE-73 — External Control of File Name or Path

References

contact@wpscan.com (technical-description, exploit, vdb-entry)

Frequently asked questions

What is CVE-2026-15382?: CVE-2026-15382 is a medium-severity vulnerability in Ultimate Addons For Wpbakery Page Builder, classified under External Control of File Name or Path. CVSS score: 6.5/10. Published 2026-07-30.
How severe is CVE-2026-15382?: Medium severity. CVSS v3 base score is 6.5 out of 10.