Visual Composer Website Builder for WordPress versions 45.16.0 and earlier are vulnerable to unauthenticated local file inclusion via the vcv-template parameter, allowing arbitrary file execution.
PoC
Visual Composer Website Builder
lfi
vulnerability
web-application
1r
2t
1c
updated