CVE-2023-46205

WordPress Ultimate Addons for WPBakery Page Builder plugin <= 3.19.14 - Local File Inclusion vulnerability

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Brainstorm Force Ultimate Addons for WPBakery Page Builder allows PHP Local File Inclusion.This issue affects Ultimate Addons for WPBakery Page Builder: from n/a through 3.19.14.

We have discovered 95,580 live websites that are affected by CVE-2023-46205.

Test my site



Affected Software

Product  Visual Composer Ultimate Addons
Category Widgets
Vulnerable Domains95,580 live websites (64.64% of Visual Composer Ultimate Addons install base)
Vulnerable Versions
  • from 0 through 3.19.14
Vulnerable Versions Count87 versions ( 83.65% of all versions)


Common Weakness Enumeration

CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')



Details

  • Published - May 17, 2024
  • Updated - Aug 2, 2024

Credits

  • Rafie Muhammad (Patchstack) (finder)

CVE-2023-46205 usage by Country

United States29,966 websites


Germany11,568 websites
France6,332 websites
GB3,904 websites
Spain3,267 websites
Italy3,244 websites
Russia3,184 websites
Netherlands2,535 websites
Poland2,225 websites
Australia1,846 websites

CVE-2023-46205 usage by TLD

.com39,262 websites
.de5,509 websites
.org3,161 websites
.co.uk2,906 websites
.it2,902 websites
.ru2,548 websites
.nl2,379 websites
.com.au2,264 websites
.fr2,057 websites
.com.br1,991 websites

Vulnerable Versions

Vulnerable versions are highlighted in red

Websites affected by CVE-2023-46205

Top websites that are affected by CVE-2023-46205. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
*****************.com United States**,***
*******.de Germany**,***
**********.com United States**,***
********.com United States**,***
************.com United States**,***
*********.com United States**,***
*********.com United States**,***
***.com United States**,***
*******.com United States**,***
**************************.pt Portugal**,***
See full domain list

FAQ

CVE-2023-46205 is Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Visual Composer Ultimate Addons
A total of 95,580 websites have been identified as vulnerable to CVE-2023-46205, discovered through global website indexing conducted by WebTechSurvey.
Visual Composer Ultimate Addons is susceptible to CVE-2023-46205 vulnerability.
Visual Composer Ultimate Addons versions before, and including, 3.19.14 are vulnerable to CVE-2023-46205.