Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by vendor Wprealize Subscribe
Filtered by product Extensive Vc Addons For Wpbakery Page Builder
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-0159 1 Wprealize 1 Extensive Vc Addons For Wpbakery Page Builder 2023-02-15 N/A 7.5 HIGH
The Extensive VC Addons for WPBakery page builder WordPress plugin before 1.9.1 does not validate a parameter passed to the php extract function when loading templates, allowing an unauthenticated attacker to override the template path to read arbitrary files from the hosts file system.