Visual Composer <= 45.16.0 - Unauthenticated LFI

Visual Composer Website Builder for WordPress = 45.16.0 contains a local file inclusion vulnerability caused by improper validation of the vcv-template parameter, letting unauthenticated attackers include and execute arbitrary files, exploit requires no authentication. id: CVE-2026-12227 info:...

CVE-2026-12227

CVE-2026-12227: Visual Composer Website Builder Inclusión Local de Archivos LFI No Autenticada Resumen CVE-2026-12227 es una vulnerabilidad crítica CVSS 9.8 de Inclusión Local de Archivos LFI no autenticada en el plugin Visual Composer Website Builder para WordPress, que afecta a todas las...

CVE-2026-12227

CVE-2026-12227: Inclusión Local de Archivos LFI No Autenticada en Visual Composer Website Builder Resumen CVE-2026-12227 es una vulnerabilidad crítica CVSS 9.8 de Inclusión Local de Archivos LFI no autenticada en el plugin Visual Composer Website Builder para WordPress, que afecta a todas las...

CVE-2026-12227-visualcomposer-lfi-poc

CVE-2026-12227 - Laboratorio de validación de LFI no autenticado en Visual Composer mediante vcv-template Material de investigación de seguridad para reproducir y validar CVE-2026-12227 : una inclusión local de archivos no autenticada en la resolución de plantillas de página del Visual Composer...

CVE-2026-12227

CVE-2026-12227 — LFI no autenticado en Visual Composer Website Builder PoC en Python 3 para CVE-2026-12227 Wordfence: Inclusión Local de Archivos a través del parámetro de consulta vcv-template en Visual Composer Website Builder visualcomposer en wordpress.org. | ---|--- Plataforma| Plugin de...

Exploit for CVE-2026-12227

CVE-2026-12227: Visual Composer Website Builder Unauthenticated...

CVE-2026-97262

Contributor Cross Site Scripting XSS in Visual Composer Website Builder = 45.16.2 versions...

EUVD-2026-89917

Contributor Cross Site Scripting XSS in Visual Composer Website Builder = 45.16.2 versions...

CVE-2026-97262 WordPress Visual Composer Website Builder plugin <= 45.16.2 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in Visual Composer Website Builder = 45.16.2 versions...

CVE-2026-97262 WordPress Visual Composer Website Builder plugin <= 45.16.2 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in Visual Composer Website Builder = 45.16.2 versions...

CVE-2026-97262

The Visual Composer Website Builder plugin for WordPress (versions

WordPress Visual Composer Website Builder plugin <= 45.16.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Intrudify in WordPress Plugin Visual Composer Website Builder versions = 45.16.2...

Exploit for CVE-2026-12227

CVE-2026-12227: Visual Composer Website Builder Unauthenticated...

Exploit for CVE-2026-12227

CVE-2026-12227 — Visual Composer Website Builder Unauthenticat...

CVE-2026-12227

The Visual Composer Website Builder plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 45.16.0 via the vcv-template parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the...

CVE-2026-12227

The Visual Composer Website Builder plugin for WordPress is vulnerable to Local File Inclusion (LFI) in all versions up to and including 45.16.0 . The flaw exists within the vcv-template parameter, which allows unauthenticated attackers to include and execute arbitrary files on the server. This c...

EUVD-2026-85839

The Visual Composer Website Builder plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 45.16.0 via the vcv-template parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the...

CVE-2026-12227 Visual Composer Website Builder <= 45.16.0 - Unauthenticated Local File Inclusion via 'vcv-template' Parameter

The Visual Composer Website Builder plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 45.16.0 via the vcv-template parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the...

WordPress Visual Composer Website Builder plugin <= 45.16.0 - Unauthenticated Local File Inclusion vulnerability

Unauthenticated Local File Inclusion vulnerability discovered by Tin Pham TF1T, Trong Pham dtro, Hao Ngo in WordPress Plugin Visual Composer Website Builder versions = 45.16.0...

CVE-2026-12227: Improper Control of Filename for Include/Require Statement in PHP Program

The Visual Composer Website Builder plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 45.16.0 via the vcv-template parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the...