CVE-2023-1274

CVE-2023-1274: falha em Pricing Tables For WPBakery Page Builder…

Pricing Tables For WPBakery Page Builder < 3.0 - Subscriber+ LFI

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Pricing Tables For WPBakery Page Builder

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 0.9%
The Pricing Tables For WPBakery Page Builder (formerly Visual Composer) WordPress plugin before 3.0 does not validate some shortcode attributes before using them to generate paths passed to include function/s, allowing any authenticated users such as subscriber to perform LFI attacks
Produtos afetados
Unknown · Pricing Tables For WPBakery Page Builder (formerly Visual Composer)
CVEs relacionadas — Pricing Tables For WPBakery Page Builder…

No mesmo produto, das mais perigosas para as menos.

CVE-2023-0367MEDIUMPricing Tables For WPBakery Page Builder < 3.0 - Contributor+ Stored XSSEPSS 0.4%