CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L
What the vulnerability does
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Brainstorm Force Ultimate Addons for WPBakery Page Builder allows PHP Local File Inclusion.This issue affects Ultimate Addons for WPBakery Page Builder: from n/a through 3.19.14.
Explanation of Vulnerability in Simple Terms
Ultimate Addons for WPBakery Page Builder versions up to 3.19.14 contain a path traversal vulnerability that allows an attacker to manipulate file paths and modify site files. The vulnerability requires user interaction, such as a victim visiting a malicious link or page. An attacker can alter site content or disable functionality, but cannot read sensitive data directly.
What an attacker can do
Modify or delete site files by manipulating file paths through the vulnerable component.
Potential impact on your site
Site files can be altered or deleted, potentially breaking functionality or injecting malicious content.
Conditions required to exploit
Victim must click a malicious link or visit an attacker-controlled page; no authentication required.
Key dates
External resources
Related vulnerabilities
