CVE Database /
CVE-2022-1386
CVE · Critical
CVE-2022-1386 — Fusion Builder [fusion-builder] < 3.6.2
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2022-1386
|
Fusion Builder [fusion-builder] < 3.6.2 |
Server-Side Request Forgery (SSRF) |
Critical
9.8
|
< 3.6.2
|
3.6.2 |
2022-04-19 |
—
|
CVE-2022-1386
The Fusion Builder plugin for WordPress, which is a core component of the Avada theme, contains a Server-Side Request Forgery vulnerability in versions before 3.6.2. An inadequately validated form parameter allows attackers without authentication to send malicious requests that interact with systems on the internal network, potentially exposing sensitive data in configurations like AWS environments.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings