Medium severity6.5NVD Advisory· Published Apr 17, 2023· Updated Jun 17, 2026
CVE-2023-1274
CVE-2023-1274
Description
The Pricing Tables For WPBakery Page Builder (formerly Visual Composer) WordPress plugin before 3.0 does not validate some shortcode attributes before using them to generate paths passed to include function/s, allowing any authenticated users such as subscriber to perform LFI attacks
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:a:pricing_tables_for_wpbakery_page_builder_project:pricing_tables_for_wpbakery_page_builder:*:*:*:*:*:wordpress:*:*Range: <3.0
(expand)+ 1 more
- (no CPE)
- (no CPE)range: <3.0
Patches
Vulnerability mechanics
References
1- wpscan.com/vulnerability/267acb2c-1a95-487f-a714-516de05d2b2fnvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.