CVE-2023-1274: vulnerability in Pricing Tables For WPBakery Page Builder…
Pricing Tables For WPBakery Page Builder < 3.0 - Subscriber+ LFI
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 0.9%
The Pricing Tables For WPBakery Page Builder (formerly Visual Composer) WordPress plugin before 3.0 does not validate some shortcode attributes before using them to generate paths passed to include function/s, allowing any authenticated users such as subscriber to perform LFI attacks
Related CVEs — Pricing Tables For WPBakery Page Builder…
In the same product, most dangerous first.