CVE-2025-14475 | Extensive VC Addons for WPBakery Page Builder Plugin extensive_vc_get_module_template_part file inclusion

A vulnerability classified as critical has been found in Extensive VC Addons for WPBakery Page Builder Plugin up to 1.9.1 on WordPress. This vulnerability affects the function extensive_vc_get_module_template_part. The manipulation of the argument shortcode_name leads to file inclusion.

This vulnerability is documented as CVE-2025-14475. The attack can be initiated remotely. There is not any exploit available.