~/products/wprealize/extensive_vc_addons_for_wpbakery_page_builder

pipeline liveDigest Docs

Wprealize Extensive Vc Addons For Wpbakery Page Builder vulnerabilities

1 known vulnerability affecting wprealize/extensive_vc_addons_for_wpbakery_page_builder.

Total CVEs

1

CISA KEV

0

Public exploits

1

Exploited in wild

1

Severity breakdown

HIGH1

Vulnerabilities

SortPage 1 of 1

CVE-2023-0159P1HIGHCVSS 7.5ExploitedPoCfixed in 1.9.12023-02-13

CVE-2023-0159 [HIGH] CWE-94 CVE-2023-0159: The Extensive VC Addons for WPBakery page builder WordPress plugin before 1.9.1 does not validate a The Extensive VC Addons for WPBakery page builder WordPress plugin before 1.9.1 does not validate a parameter passed to the php extract function when loading templates, allowing an unauthenticated attacker to override the template path to read arbitrary files from the hosts file system. This may be escalated to RCE using PHP filter chains.

Wprealize Extensive Vc Addons For Wpbakery Page Builder vulnerabilities | cvebase