CVE-2026-12227

CVE-2026-12227 — LFI no autenticado en Visual Composer Website Builder PoC en Python 3 para CVE-2026-12227 Wordfence: Inclusión Local de Archivos a través del parámetro de consulta vcv-template en Visual Composer Website Builder visualcomposer en wordpress.org. | ---|--- Plataforma| Plugin de...

CVE-2026-12227

The Visual Composer Website Builder plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 45.16.0 via the vcv-template parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the...

CVE-2026-12227

The Visual Composer Website Builder plugin for WordPress is vulnerable to Local File Inclusion (LFI) in all versions up to and including 45.16.0 . The flaw exists within the vcv-template parameter, which allows unauthenticated attackers to include and execute arbitrary files on the server. This c...

CVE-2026-12227 Visual Composer Website Builder <= 45.16.0 - Unauthenticated Local File Inclusion via 'vcv-template' Parameter

The Visual Composer Website Builder plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 45.16.0 via the vcv-template parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the...

EUVD-2026-85839

The Visual Composer Website Builder plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 45.16.0 via the vcv-template parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the...