Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
1 selected

2 records

Release: Pricing Tables For WPBakery Page Builder (formerly Visual Composer) 3.0 Clear all filters
TI-2023-01203 CVE-2023-1274 · GHSA-5x8x-x5xp-q5vc

Pricing Tables For WPBakery Page Builder < 3.0 - Subscriber+ LFI

Priority MEDIUM 62

The Pricing Tables For WPBakery Page Builder (formerly Visual Composer) WordPress plugin before 3.0 does not validate some shortcode attributes before using them to generate paths passed to include function/s, allowing a…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.009 Published 2023-04-17 Fixed in 3.0
TI-2023-00351 CVE-2023-0367 · GHSA-9vxp-r8hx-2p35

Pricing Tables For WPBakery Page Builder < 3.0 - Contributor+ Stored XSS

Priority MEDIUM 58

The Pricing Tables For WPBakery Page Builder (formerly Visual Composer) WordPress plugin before 3.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the short…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00444 Published 2023-04-17 Fixed in 3.0