CVE WATCH / VULNERABILITY DETAIL
CVE-2026-110516
UNKNOWNCVSS 0NVD feed
Published 10 November 2026 · tracked since 11 November 2026
Description
The All in One Addons For WPBakery Page Builder (formerly Visual Composer) WordPress plugin through 1.2 does not validate a shortcode attribute before using it to build a file path that is included and executed, which could allow users with the contributor role and above to include and execute arbi
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-124937
- CVE-2026-124911
- CVE-2026-125745 MEDIUM 4.3
- CVE-2026-12573 HIGH 8.8
- CVE-2026-12572 HIGH 7.2
- CVE-2026-125715 MEDIUM 5.3
- CVE-2026-125712 HIGH 7.5
- CVE-2026-125706 MEDIUM 5.5
- CVE-2026-120326
- CVE-2026-95646 HIGH 8