Extensive VC Addons for WPBakery page builder, CVE-2025-60087

CVE, Research URL: CVE-2025-60087
Home page URL: Security reports for Extensive VC Addons for WPBakery page builder
Application: Extensive VC Addons for WPBakery page builder
Published on: Feb 20, 2026
Research Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Nenad Obradovic Extensive VC Addons for WPBakery page builder extensive-vc-addon allows PHP Local File Inclusion.This issue affects Extensive VC Addons for WPBakery page builder: from n/a through <= 1.9.1.
Affected versions: max 1.9.1.
Status: vulnerable