{"uuid": "f2f145d3-15a8-49cc-98b2-920627491fdb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-12227", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117325550570551615", "content": "Visual Composer Website Builder plugin \u226445.16.0 hit by CRITICAL LFI (CVE-2026-12227). Unauthenticated attackers can execute arbitrary PHP files via 'vcv-template'. Patch unconfirmed. Mitigate & monitor now: https://radar.offseq.com/threat/cve-2026-12227-cwe-98-improper-control-of-filename-for-includerequire-statement-in-php-program-php-ed037e731eb4a3e7 #OffSeq #WordPress #Vuln #LFI", "creation_timestamp": "2026-09-24T10:30:28.496142Z"}