CVE-2023-0159
Extensive VC Addons for WPBakery page builder < 1.9.1 - Unauthenticated RCE
- State
- Published
- Severity
- Not scored
- Published
- Feb 13, 2023
- Updated
- Aug 2, 2024
- Reserved
- Jan 10, 2023
Description
The Extensive VC Addons for WPBakery page builder WordPress plugin before 1.9.1 does not validate a parameter passed to the php extract function when loading templates, allowing an unauthenticated attacker to override the template path to read arbitrary files from the hosts file system. This may be escalated to RCE using PHP filter chains.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
Extensive VC Addons for WPBakery page builderUnknown |
|
References
- https://wpscan.com/vulnerability/239ea870-66e5-4754-952e-74d4dd60b809exploitvdb-entrytechnical-description
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.