Extensive VC Addons for WPBakery page builder vulnerabilities

2 known vulnerabilities in Extensive VC Addons for WPBakery page builder from Nenad Obradovic. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  Extensive VC Addons for WPBakery page builder: Improper Control of Filename for Include/Require Statement in PHP Program

  CVE-2025-60087Feb 20, 2026Nenad Obradovic

  Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Nenad Obradovic Extensive VC Addons for WPBakery page builder extensive-vc-addon allows PHP Local File Inclusion.This issue affects Extensi

• 8.1 High severity

  Extensive VC Addons for WPBakery page builder: Improper Control of Filename for Include/Require Statement in PHP Program

  CVE-2025-14475Dec 13, 2025Nenad Obradovic

  The Extensive VC Addons for WPBakery page builder plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.9.1 via the `extensive_vc_get_module_template_part` function. This is due to insufficient path normalization an