{"affected":[{"defaultStatus":"unknown","product":"All in One Addons For WPBakery Page Builder  (formerly Visual Composer)","source":"CNA: WPScan","vendor":"Unknown","versions":[{"lessThanOrEqual":"1.2","status":"affected","version":"0","versionType":"semver"}]}],"cveId":"CVE-2026-110516","cwes":["CWE-22"],"description":"The All in One Addons For WPBakery Page Builder  (formerly Visual Composer) WordPress plugin through 1.2 does not validate a shortcode attribute before using it to build a file path that is included and executed, which could allow users with the contributor role and above to include and execute arbitrary local PHP files on the server.","epss":null,"exploits":[{"kind":"exploit","source":"CNA: WPScan","url":"https://wpscan.com/vulnerability/bce6e184-91b9-444b-bb23-c356cf0488cd/"}],"kev":null,"metrics":[],"modifiedAt":1794290404445,"publishedAt":1794290404445,"references":[{"source":"CNA: WPScan","tags":["exploit","vdb-entry","technical-description"],"url":"https://wpscan.com/vulnerability/bce6e184-91b9-444b-bb23-c356cf0488cd/"}],"remediation":[],"revision":"727963f65be1e8011a2122ddbb8a4c5fd63efd889d3333de8175650d35ade259","sources":[{"modifiedAt":1794290404445,"name":"CNA: WPScan","retrievedAt":1794290903618,"url":"https://www.cve.org/CVERecord?id=CVE-2026-110516"}],"ssvc":null,"status":"published","title":"All in One Visual Composer Addons <= 1.2 - Contributor+ LFI via vca_tabs_style Shortcode Attribute","updatedAt":1794290903618}