CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
What the vulnerability does
The Ona theme for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.26 via the ona_activate_child_theme. This makes it possible for authenticated attackers, with administrator-level access and above, to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services.
Explanation of Vulnerability in Simple Terms
Ona versions 1.26 and earlier contain a server-side request forgery vulnerability that allows high-privilege users to make the application send requests to internal or external systems on their behalf. The vulnerability requires high attack complexity and administrative access. Impact is limited to low-level information disclosure and data modification.
What an attacker can do
Make the site send HTTP requests to internal systems or external servers under the attacker's control.
Potential impact on your site
An admin account could be compromised to probe internal infrastructure or exfiltrate limited data via forced requests.
Conditions required to exploit
Attacker must have high-level administrative privileges; no user interaction required.
Key dates
External resources
