CVE-2024-13592

Summary

CVE-2024-13592: The Team Builder plugin for WPBakery Page Builder (formerly Visual Composer) for WordPress contains a Local File Inclusion vulnerability. This issue, present in all versions up to 1.0, allows authenticated attackers with Contributor-level access or higher to include and execute arbitrary files on affected servers. The vulnerability can be exploited to bypass access controls, obtain sensitive information, or execute PHP code within the included files. This risk is heightened when uploading and including files with seemingly safe extensions, such as images.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.