https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 10:27:52 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-01164 bdu:2024-01164 https://cve.radiocsirt.org/vuln/bdu:2024-01164 https://cve.radiocsirt.org/vuln/euvd-2026-6497 EUVD-2026-6497 https://cve.radiocsirt.org/vuln/euvd-2026-6497 https://cve.radiocsirt.org/vuln/fkie_cve-2023-0159 <p>The Extensive VC Addons for WPBakery page builder WordPress plugin before 1.9.1 does not validate a parameter passed to the php extract function when loading templates, allowing an unauthenticated attacker to override the template path to read arbitrary files from the hosts file system. This may be escalated to RCE using PHP filter chains.</p> <p>The Extensive VC Addons for WPBakery page builder WordPress plugin before 1.9.1 does not validate a parameter passed to the php extract function when loading templates, allowing an unauthenticated attacker to override the template path to read arbitrary files from the hosts file system. This may be escalated to RCE using PHP filter chains.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-0159 https://cve.radiocsirt.org/vuln/ghsa-c4h9-8c9r-v3m8 <p>The Extensive VC Addons for WPBakery page builder WordPress plugin before 1.9.1 does not validate a parameter passed to the php extract function when loading templates, allowing an unauthenticated attacker to override the template path to read arbitrary files from the hosts file system.</p> <p>The Extensive VC Addons for WPBakery page builder WordPress plugin before 1.9.1 does not validate a parameter passed to the php extract function when loading templates, allowing an unauthenticated attacker to override the template path to read arbitrary files from the hosts file system.</p> https://cve.radiocsirt.org/vuln/ghsa-c4h9-8c9r-v3m8 https://cve.radiocsirt.org/vuln/gsd-2023-0159 gsd-2023-0159 https://cve.radiocsirt.org/vuln/gsd-2023-0159