CVE-2023-0159 — AI Deep Analysis Summary

🚨 **Essence**: Path Traversal (LFI) in 'Extensive VC Addons for WPBakery'. 💥 **Consequences**: Attackers can read arbitrary files from the host server.…

🛡️ **Root Cause**: Lack of input validation on parameters passed to the `php extract` function during template loading. 🔍 **CWE**: Implicitly CWE-22 (Path Traversal) & CWE-913 (Improper Control of Filename for Include).…

📦 **Product**: WordPress Plugin: 'Extensive VC Addons for WPBakery page builder'. 📉 **Affected Versions**: All versions **< 1.9.1**. 🌐 **Platform**: WordPress sites using this specific addon.

🕵️ **Privileges**: **Unauthenticated** access required. No login needed. 📂 **Data Impact**: Can read sensitive system files (e.g., `/etc/passwd`, config files).…

⚡ **Threshold**: **LOW**. Exploitation is **Unauthenticated**. Any visitor can trigger the vulnerability without credentials. High ease of use.

🔥 **Public Exploits**: **YES**. 🛠️ **Tools**: - `EVCer` (Automatic Mass Tool using GNU Parallel). - `nuclei-templates` (ProjectDiscovery). - `Extensive` scanner. 🌍 **Status**: Active mass scanning and exploitation tools…

🔍 **Self-Check**: 1. Use **Nuclei** with the CVE-2023-0159 template. 2. Run **EVCer** script for bulk checking. 3.…

🩹 **Official Fix**: **YES**. ✅ **Solution**: Upgrade the plugin to version **1.9.1** or later. The vendor has released a patch for this specific vulnerability.

🚧 **Workaround (If no patch)**: 1. **Disable/Deactivate** the 'Extensive VC Addons for WPBakery' plugin immediately. 2.…

🚨 **Urgency**: **HIGH**. ⚠️ **Reason**: Unauthenticated + Public PoCs + RCE potential. Immediate patching or deactivation is critical to prevent server compromise.