CVE-2022-1386 The Fusion Builder WordPress plugin before 3.6.2 doesn't validate a parameter in its forms, which could be used to initiate HTTP requests and return data in the application's response.

To exploit this vulnerability, an attacker would have to host a malicious configuration file on a publicly accessible server, such as a web server on a project's hosting provider's network. An attacker would then have to submit a malicious form via the WordPress plugin's backend. WordPress versions 3.6.2 and earlier are vulnerable.

A hacker could exploit this vulnerability by sending a request to a host on the same network as the WordPress website. The hacker would have to host a configuration file on a public server, such as on a project's hosting provider's network. An attacker would then have to submit a malicious form via the WordPress plugin's backend. WordPress versions 3.7.0 and earlier are vulnerable. A hacker could exploit this vulnerability by sending a request to a host on the same network as the WordPress website. The hacker would have to host a configuration file on a public server, such as on a project's hosting provider's network.

Mitigation

The WordPress Security Team has released a patch to correct this vulnerability.

What can be done to prevent exploitation?

An attacker would not be able to exploit this vulnerability if the WordPress website is behind a firewall or if the WordPress website is using HTTP authentication.
If the WordPress website is not behind a firewall or using HTTP authentication, an attacker would have to send a request to the PHP server on a host on the same network as the WordPress website.

CVE-2022-1386 The Fusion Builder WordPress plugin before 3.6.2 doesn't validate a parameter in its forms, which could be used to initiate HTTP requests and return data in the application's response.

Mitigation

What can be done to prevent exploitation?

What's vulnerable?

Timeline

References