CVE-2023-1274

Published: Apr 17, 2023Modified: Jun 17, 2026

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

The Pricing Tables For WPBakery Page Builder (formerly Visual Composer) WordPress plugin before 3.0 does not validate some shortcode attributes before using them to generate paths passed to include function/s, allowing any authenticated users such as subscriber to perform LFI attacks

Affected (1)

Products: Pricing Tables For Wpbakery Page Builder Project: Pricing Tables For Wpbakery Page Builder

Pricing Tables For Wpbakery Page Builder Project

1 product

Pricing Tables For Wpbakery Page Builder

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Pricing Tables For Wpbakery Page Builder Project Pricing Tables For Wpbakery Page Builder	version < 3.0

References (2)

https://wpscan.com/vulnerability/267acb2c-1a95-487f-a714-516de05d2b2f

Source: contact@wpscan.com

ExploitThird Party Advisory

https://wpscan.com/vulnerability/267acb2c-1a95-487f-a714-516de05d2b2f

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

Timeline

No history available yet.