CVE-2024-56286

Name of the Vulnerable Software and Affected Versions Classic Addons – WPBakery Page Builder versions prior to 3.0

Description The issue is related to an improper limitation of a pathname to a restricted directory, also known as a 'Path Traversal' vulnerability. This allows for PHP Local File Inclusion, which can lead to the inclusion of local PHP files.

Recommendations For versions prior to 3.0, update to a version that includes the fix for this issue. As a temporary workaround, consider restricting access to sensitive directories and files to minimize the risk of exploitation.