Vulnerability · Published Feb 13, 2023 · Assigned by WPScan

CVE-2023-0159 Extensive VC Addons for WPBakery page builder < 1.9.1 - Unauthenticated RCE

High 7.5

In plain English

A high-severity security flaw in Extensive VC Addons for WPBakery page builder from Unknown. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 55.5% (higher than 99.0% of all known vulnerabilities). Ready-made attack tooling exists: Nuclei, public proof-of-concept code.

Severity (CVSS NVD)7.5High

Exploit odds (30 days)55.5%top 1.0% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack tooling2Nuclei, Public PoC

Official description

The Extensive VC Addons for WPBakery page builder WordPress plugin before 1.9.1 does not validate a parameter passed to the php extract function when loading templates, allowing an unauthenticated attacker to override the template path to read arbitrary files from the hosts file system. This may be escalated to RCE using PHP filter chains.

Affected products (as reported)

Vendor	Product	Versions
Unknown	Extensive VC Addons for WPBakery page builder	0 – before 1.9.1

References

https://wpscan.com/vulnerability/239ea870-66e5-4754-952e-74d4dd60b809 exploit, vdb-entry, technical-description