CVE-2026-110516

The All in One Addons For WPBakery Page Builder (formerly Visual Composer) WordPress plugin, version 1.2 and below , is vulnerable to arbitrary local file inclusion and execution. The root cause is a failure to validate a shortcode attribute before it is used to construct a file path. This flaw c...