Vulnerabilities

TI-2025-37453 CVE-2025-60087 · GHSA-f6p8-2gf3-784r

WordPress Extensive VC Addons for WPBakery page builder plugin <= 1.9.1 - Local File Inclusion vulnerability

LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Nenad Obradovic Extensive VC Addons for WPBakery page builder extensive-vc-addon allows PHP Local F…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00658 Published 2026-02-20 No fix listed CWE-98

TI-2025-13219 CVE-2025-14475 · GHSA-c35m-5289-ffv6

Extensive VC Addons for WPBakery page builder <= 1.9.1 - Unauthenticated Local File…

LOW 38

The Extensive VC Addons for WPBakery page builder plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.9.1 via the `extensive_vc_get_module_template_part` function.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00627 Published 2025-12-13 No fix listed CWE-98

Vulnerabilities

Filters

WordPress Extensive VC Addons for WPBakery page builder plugin <= 1.9.1 - Local File Inclusion vulnerability

Extensive VC Addons for WPBakery page builder <= 1.9.1 - Unauthenticated Local File…