7.5

CVE-2023-0159

Exploit

Extensive VC Addons for WPBakery page builder < 1.9.1 - Unauthenticated RCE

Extensive VC Addons for WPBakery page builder <= 1.9 - Unauthenticated Local File Inclusion

The Extensive VC Addons for WPBakery page builder WordPress plugin before 1.9.1 does not validate a parameter passed to the php extract function when loading templates, allowing an unauthenticated attacker to override the template path to read arbitrary files from the hosts file system. This may be escalated to RCE using PHP filter chains.
Mögliche Gegenmaßnahme
Extensive VC Addons for WPBakery page builder: Update to version 1.9.1, or a newer patched version
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Wprealize ≫ Extensive Vc Addons For Wpbakery Page Builder SwPlatformwordpress Version < 1.9.1
Weitere Schwachstelleninformationen
SystemWordPress Plugin
≫
Produkt Extensive VC Addons for WPBakery page builder
Version *-1.9
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 55.74% 0.989
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://wpscan.com/vulnerability/239ea870-66e5-4754-952e-74d4dd60b809
Third Party Advisory
Exploit
https://www.wordfence.com/threat-intel/vulnerabilities/id/c85fa04e-477e-4ac9-b112-02b2ab18ca32
Third Party Advisory