CVE-2022-1386-FusionBuilder-SSRF

CVE-2022-1386 – Fusion Builder 예시: python3 exploitcve20221386.py https://vulnerable.site https://abc123.oast.fun 콜백을 수신하려면 Interact.sh 또는 Burp Collaborator를 사용하세요. 📋 샘플 출력 Fetching nonce from target... Sending SSRF payload to https://abc123.oast.fun... + SSRF confirmed: received callback from...

WordPress Fusion Builder <3.6.2 - Server-Side Request Forgery

WordPress Fusion Builder plugin before 3.6.2 is susceptible to server-side request forgery. The plugin does not validate a parameter in its forms, which can be used to initiate arbitrary HTTP requests. The data returned is then reflected back in the application's response. An attacker can...

fubucker

Fubucker | CVE-2022-1386 - Fusion Builder CVE-2022-1386 - Fusion Builder install.sh sha1sum install.sh | grep 12345678 md5sum install.sh sha512sum install.sh bash install.sh JQ 설치 Linux : 명령 apt-get install jq -y Windows : WSL의 경우 Linux와 동일하게 설치하고, GitBash에서는 다음 명령을 실행하세요. 명령 curl -L -o C:/Progra...

CVE-2022-1386

CVE-2022-1386 - Fusion Builder 3.6.2 - 인증되지 않은 SSRF 설명 Fusion Builder는 드래그 앤 드롭 인터페이스를 사용하여 페이지를 만들고 편집할 수 있는 WordPress 플러그인입니다. 이 플러그인은 인증되지 않은 SSRF 취약점을 가지고 있어 공격자가 서버의 모든 파일을 읽을 수 있습니다. 개념 증명 요청: POST /wp-admin/admin-ajax.php HTTP/1.1 Host: example.com User-Agent: Mozilla/5.0 Windows NT 10.0;...

CVE-2026-8713

CVE-2026-8713 — Avada Fusion Builder WordPress 익스플로잇 인증 없이 경로 탐색 → 임의 파일 삭제 → 강제 재설치 → RCE 개요 CVE-2026-8713 은 WordPress용 Avada Fusion Builder 플러그인/테마에서 발생하는 CVSS 9.1 치명적 취약점입니다. FusionFormDBEntries 클래스의 maybedeletefiles 함수가 공격자가 제어하는 양식 항목 값에서 단순 문자열 치환만으로 파일 시스템 경로를 구성하며, realpath 검증이나 디렉토리 포함 제...

CVE-2022-1386

설명 Fusion Builder는 드래그 앤 드롭 인터페이스를 사용하여 페이지를 만들고 편집할 수 있게 해주는 WordPress 플러그인입니다. 이 플러그인은 인증되지 않은 SSRF서버 측 요청 위조 취약점에 노출되어 있으며, 이를 통해 공격자는 서버에 있는 모든 파일을 읽을 수 있습니다. 개념 증명 PoC 요청: POST /wp-admin/admin-ajax.php HTTP/1.1 Host: redacted.com User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64; rv:98.0...

EUVD-2026-67409

The Avada Fusion Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'size' Shortcode Attribute in all versions up to, and including, 3.15.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2026-16654: Improper Neutralization of Input During Web Page Generation

The Avada Fusion Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'size' Shortcode Attribute in all versions up to, and including, 3.15.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

PT-2026-82859

The Avada Fusion Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'size' Shortcode Attribute in all versions up to, and including, 3.15.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

WordPress Avada (Fusion) Builder plugin <= 3.15.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'size' Shortcode Attribute vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via 'size' Shortcode Attribute vulnerability discovered by João Pedro Soares de Alcântara - Kinorth in WordPress Plugin Fusion Builder versions = 3.15.6...

WordPress Fusion Builder plugin <= 3.16 - Unauthenticated Remote Code Execution via Arbitrary File Write vulnerability

Unauthenticated Remote Code Execution via Arbitrary File Write vulnerability discovered by WordFence in WordPress Plugin Fusion Builder versions = 3.16...

CVE-2026-18431

The Avada theme for WordPress is vulnerable to Arbitrary File Write in all versions up to, and including, 7.16 when the Fusion Builder plugin is installed and active in versions up to, and including, 3.16. This is due to a chain of authorization and input validation weaknesses across the two...

CVE-2026-18431 Avada <= 7.16 and Fusion Builder <= 3.16 - Unauthenticated Remote Code Execution via Arbitrary File Write

The Avada theme for WordPress is vulnerable to Arbitrary File Write in all versions up to, and including, 7.16 when the Fusion Builder plugin is installed and active in versions up to, and including, 3.16. This is due to a chain of authorization and input validation weaknesses across the two...

CVE-2026-18431

The Avada WordPress theme (≤ 7.16) combined with the Fusion Builder plugin (≤ 3.16) is vulnerable to unauthenticated Remote Code Execution via a chain of six authorization and input validation weaknesses enabling arbitrary file write. An attacker can create and execute arbitrary PHP files, leadin...

CVE-2026-18431 Avada <= 7.16 and Fusion Builder <= 3.16 - Unauthenticated Remote Code Execution via Arbitrary File Write

The Avada theme for WordPress is vulnerable to Arbitrary File Write in all versions up to, and including, 7.16 when the Fusion Builder plugin is installed and active in versions up to, and including, 3.16. This is due to a chain of authorization and input validation weaknesses across the two...

EUVD-2026-66293

The Avada theme for WordPress is vulnerable to Arbitrary File Write in all versions up to, and including, 7.16 when the Fusion Builder plugin is installed and active in versions up to, and including, 3.16. This is due to a chain of authorization and input validation weaknesses across the two...

CVE-2026-18431: Missing Authorization

The Avada theme for WordPress is vulnerable to Arbitrary File Write in all versions up to, and including, 7.16 when the Fusion Builder plugin is installed and active in versions up to, and including, 3.16. This is due to a chain of authorization and input validation weaknesses across the two...

PT-2026-81951

Name of the Vulnerable Software and Affected Versions Avada versions prior to 7.16.1 Fusion Builder versions prior to 3.16.1 Description An unauthenticated attacker can achieve remote code execution and complete site compromise by writing attacker-controlled PHP files to the server. This is...

Avada <= 7.16 and Fusion Builder <= 3.16 - Unauthenticated Remote Code Execution via Arbitrary File Write

Description The Avada theme for WordPress is vulnerable to Arbitrary File Write in all versions up to, and including, 7.16 when the Fusion Builder plugin is installed and active in versions up to, and including, 3.16. This is due to a chain of authorization and input validation weaknesses across...

CVE-2026-12536

The Avada Fusion Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘Module Title’ parameter in all versions up to, and including, 3.15.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...