🚨 **Essence**: A critical **Privilege Escalation** flaw in ThemeFusion Fusion Builder. <br>💥 **Consequences**: Low-level users can gain full admin control.…
🔍 **Root Cause**: Broken **Access Control** & **Permission Licensing**. <br>⚠️ **Flaw**: The plugin fails to properly verify user roles before executing sensitive actions, allowing unauthorized privilege escalation.
Q3影响谁？（版本/组件）
📦 **Affected**: WordPress Plugin **Fusion Builder** by ThemeFusion. <br>📅 **Version**: **3.15.4 and earlier**. If you are on this version or below, you are at risk!
Q4黑客能干啥？（权限/数据）
👮 **Hacker Action**: A user with the **Contributor** role (low privilege) can escalate to **Administrator**. <br>🔓 **Impact**: Full control over the site, data theft, and malicious code injection.
Q5利用门槛高吗？（认证/配置）
🔑 **Threshold**: **Low**. <br>📝 **Auth**: Requires **Low Privilege** (PR:L). <br>🌐 **Vector**: Network (AV:N). <br>👀 **UI**: None required (UI:N). Easy to exploit if an account exists.
Q6有现成Exp吗？（PoC/在野利用）
📜 **Public Exp?**: **No**. The `pocs` field is empty. <br>🕵️ **Status**: While no public PoC is listed, the CVSS score suggests high exploitability. Assume it *could* be weaponized.
Q7怎么自查？（特征/扫描）
🔎 **Self-Check**: <br>1. Check WordPress Dashboard for **Fusion Builder** plugin. <br>2. Verify version is **≤ 3.15.4**. <br>3. Scan for unauthorized **Contributor** accounts with suspicious activity.
Q8官方修了吗？（补丁/缓解）
🛡️ **Fix**: **Yes**. <br>🔧 **Action**: Update Fusion Builder to the latest version immediately. The vendor has acknowledged the issue (Ref: Patchstack).
Q9没补丁咋办？（临时规避）
🚧 **No Patch Workaround**: <br>1. **Disable** the Fusion Builder plugin if not essential. <br>2. **Remove** low-privilege user accounts (Contributors) if possible. <br>3. Restrict plugin access via server-level rules.
Q10急不急？（优先级建议）
⚡ **Urgency**: **CRITICAL**. <br>🚀 **Priority**: **Immediate Action Required**. CVSS 9.8 means this is a top-priority fix. Patch now to prevent total site compromise!