Classic Addons WPBakery Page Builder Local File Inclusion Vulnerability

A path traversal vulnerability allowing PHP local file inclusion has been identified in the Classic Addons WPBakery Page Builder plugin, affecting versions through 3.0. This vulnerability could enable the inclusion of local files from the target website, potentially exposing sensitive information such as database credentials, which could lead to a complete database takeover depending on the configuration.

Impact

Exploitation of this vulnerability could allow a malicious actor to include local files from the server, such as those containing database credentials, and execute them, potentially leading to a database takeover.

Remediation

Users of the Classic Addons WPBakery Page Builder plugin should update to version 3.1 or later to address this vulnerability.