Pricing Tables For Wpbakery Page Builder (Formerly Visual Composer)

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:unknown:pricing_tables_for_wpbakery_page_builder_(formerly_visual_composer):*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUnknown (668ca391-a6cc-5e33-879b-83885214de33)
ProductPricing Tables For Wpbakery Page Builder (Formerly Visual Composer) (bf993ffc-e90b-5d05-81c4-3e9748a61309)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-1274 vulnerable 2026-06-08 05:52:34.307486 Pricing Tables For WPBakery Page Builder < 3.0 - Subscriber+ LFI
The Pricing Tables For WPBakery Page Builder (formerly Visual Composer) WordPress plugin before 3.0 does not validate some shortcode attributes before using them to generate paths passed to include function/s, allowing any authenticated users such as subscriber to perform LFI attacks
Published: 2023-04-17T12:17:46.362Z
Updated: 2025-03-03T19:24:13.637Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0367 vulnerable 2026-06-08 05:52:04.826406 Pricing Tables For WPBakery Page Builder < 3.0 - Contributor+ Stored XSS
The Pricing Tables For WPBakery Page Builder (formerly Visual Composer) WordPress plugin before 3.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks
Published: 2023-04-17T12:17:44.774Z
Updated: 2025-03-03T19:25:35.814Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.