Unknown Ultimate Addons for WPBakery Page Builder

• CVE-2026-14921 Medium 6.1 Ultimate Addons for WPBakery Page Builder < 3.21.5 - Contributor+ Stored XSS via ult_buttons Shortcode 0.3%
• CVE-2026-15382 Medium 6.5 Ultimate Addons for WPBakery Page Builder < 3.21.4 - Unauthenticated Custom Icon Font Deletion via delete-bsf-fonts 0.4%