VYPR

Extensive Vc Addons For Wpbakery Page Builder

by Wprealize

CVEs (1)

  • CVE-2023-0159HigFeb 13, 2023
    risk 0.56cvss 7.5epss 0.55

    The Extensive VC Addons for WPBakery page builder WordPress plugin before 1.9.1 does not validate a parameter passed to the php extract function when loading templates, allowing an unauthenticated attacker to override the template path to read arbitrary files from the hosts file…