CVE-2023-0159

Katalog CVE

CVSS 7.5 · High EPSS 55,5%

Kerentanan pada wprealize extensive vc addons for wpbakery page builder. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

The Extensive VC Addons for WPBakery page builder WordPress plugin before 1.9.1 does not validate a parameter passed to the php extract function when loading templates, allowing an unauthenticated attacker to override the template path to read arbitrary files from the hosts file system. This may be escalated to RCE using PHP filter chains.

Rincian

Terbit di NVD

13 Februari 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

EPSS (30 hari)

55,5% peluang dieksploitasi; lebih tinggi dari 99,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://wpscan.com/vulnerability/239ea870-66e5-4754-952e-74d4dd60b809 exploit · advisory pihak ketiga