Extensive VC Addons for WPBakery page builder < 1.9.1 - Unauthenticated RCE
72Vexday Risk Score
Patch now. It exploitation observed by VulnCheck and has a working public exploit.
ssvc Actepss 56%
from disclosure to weapon210 days
Published on NVDFeb 13
1st PoC+210d
VulnCheck+916d
exploitation probability
56%top 1% of all CVEs
observed exploitation
yesVulnCheck
4 public exploit(s)
The Extensive VC Addons for WPBakery page builder WordPress plugin before 1.9.1 does not validate a parameter passed to the php extract function when loading templates, allowing an unauthenticated attacker to override the template path to read arbitrary files from the hosts file system. This may be escalated to RCE using PHP filter chains.
Affected products
Unknown · Extensive VC Addons for WPBakery page builderpublic PoCs found — 4
exploitdbwww.exploit-db.com/exploits/52085unverifiedgithubgithub.com/im-hanzou/EVCer★ 2cve_referencewpscan.com/vulnerability/239ea870-66e5-4754-952e-74d4dd60b809unverifiedvulncheckvulncheck.com/xdb/7ca73fc351a3unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.