CVE-2023-1274

MEDIO 6.5CVE-2023-1274 · Published 17/04/2023 · updated 17/06/2026

In breve

CVE-2023-1274 è una vulnerabilità MEDIO (CVSS 6.5) che riguarda pricing tables for wpbakery page builder (pricing tables for wpbakery page builder project).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.90%, superiore al 59.8% delle vulnerabilità.
Correzione: aggiornare a 3.0 o successiva.

Package	Affected versions	Patched versions
pricing tables for wpbakery page builder pricing_tables_for_wpbakery_page_builder_project	`< 3.0`	`3.0`

Description

The Pricing Tables For WPBakery Page Builder (formerly Visual Composer) WordPress plugin before 3.0 does not validate some shortcode attributes before using them to generate paths passed to include function/s, allowing any authenticated users such as subscriber to perform LFI attacks

References

wpscan.com/vulnerability/267acb2c-1a95-487f-a714-516de05d2b2f · Exploit

Altre vulnerabilità di pricing tables for wpbakery page builder

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free