PT-2023-8557 · WordPress · Extensive Vc Addons

Dc11 + 1 · Published 2023-02-13 · Updated 2023-12-05 · CVE-2023-0159

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Extensive VC Addons for WPBakery page builder WordPress plugin versions prior to 1.9.1

Description The issue is related to incorrect validation of a parameter passed to the php extract function when loading templates. This allows an unauthenticated attacker to override the template path, enabling them to read arbitrary files from the host's file system. The attack may be escalated to achieve remote code execution (RCE) using PHP filter chains. The vulnerability is associated with incorrect code generation management in the Extensive VC Addons plugin for WordPress, potentially allowing a remote attacker to disclose protected information.

Recommendations For versions prior to 1.9.1, update to version 1.9.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the template loading functionality to minimize the risk of exploitation.

Exploit

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

BDU:2024-01164

CVE-2023-0159

Affected Products

Extensive Vc Addons

References · 5

• 🔥 https://wpscan.com/vulnerability/239ea870-66e5-4754-952e-74d4dd60b809 · Exploit
• https://osv.dev/vulnerability/CVE-2023-0159 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-0159 · Security Note
• https://bdu.fstec.ru/vul/2024-01164 · Security Note
• https://t.me/cvenotify/62378 · Telegram Post