Vulnerability · Published May 16, 2022 · Assigned by WPScan
CVE-2022-1386Fusion Builder < 3.6.2 - Unauthenticated SSRF
Critical 9.8
In plain English
A critical-severity server-side request forgery in Fusion Builder from Unknown. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 71.4% (higher than 99.4% of all known vulnerabilities). Ready-made attack tooling exists: Nuclei, public proof-of-concept code.
Official description
The Fusion Builder WordPress plugin before 3.6.2, used in the Avada theme, does not validate a parameter in its forms which could be used to initiate arbitrary HTTP requests. The data returned is then reflected back in the application's response. This could be used to interact with hosts on the server's local network bypassing firewalls and access control measures.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Unknown | Fusion Builder | 3.6.2 – before 3.6.2 |
Weakness: CWE-918