Hi,
Sorry for late response, I have discussed with my team and we are lunching an update soon so you will have to update the theme or plug-in in that case.

Thanks,

True, there is a vulnerability https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/Ultimate_VC_Addons/ultimate-addons-for-wpbakery-page-builder-31914-authenticatedcontributor-local-file-inclusion

Waiting for the plugin update.