Threats tagged 'ghsa-4pcg-5333-j2rf'

The All in One Addons For WPBakery Page Builder WordPress plugin through version 1.2 contains a vulnerability where it does not validate a shortcode attribute before using it to build a file path. This flaw could allow users with contributor role or higher to include and execute arbitrary local PHP files on the server.