Builderius
Monthly
Server-side request forgery in the Builderius WordPress plugin (versions 1.4 through 1.4-beta) lets an attacker drive the affected site to make arbitrary outbound HTTP requests, potentially reaching internal services, localhost, and cloud instance metadata endpoints. Our independent assessment scores this as network-reachable, low-complexity, and requiring low-privileged authenticated access (PR:L, base 7.2 HIGH), while the vendor-supplied vector claims unauthenticated access (PR:N) that remains unverified; comparable WordPress plugin SSRFs in practice often require a logged-in user. Impact is limited to low confidentiality and integrity with a scope change, and no public exploit code or confirmed active exploitation was identified at time of analysis.
Server-side request forgery in the Builderius WordPress plugin (versions 1.4 through 1.4-beta) lets an attacker drive the affected site to make arbitrary outbound HTTP requests, potentially reaching internal services, localhost, and cloud instance metadata endpoints. Our independent assessment scores this as network-reachable, low-complexity, and requiring low-privileged authenticated access (PR:L, base 7.2 HIGH), while the vendor-supplied vector claims unauthenticated access (PR:N) that remains unverified; comparable WordPress plugin SSRFs in practice often require a logged-in user. Impact is limited to low confidentiality and integrity with a scope change, and no public exploit code or confirmed active exploitation was identified at time of analysis.