| |
Vulnerability CVE-2023-1274
Published: 2023-04-17
| Description: |
The Pricing Tables For WPBakery Page Builder (formerly Visual Composer) WordPress plugin before 3.0 does not validate some shortcode attributes before using them to generate paths passed to include function/s, allowing any authenticated users such as subscriber to perform LFI attacks |
Type:
CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'))
References: |
https://wpscan.com/vulnerability/267acb2c-1a95-487f-a714-516de05d2b2f
|
|
|
Copyright 2026, cxsecurity.com
|
|
|
