Builderall Builder for WordPress Code Injection Vulnerability Allowing Remote Code Execution

A code injection vulnerability has been identified in the Builderall Builder for WordPress plugin, specifically in versions through 3.0.1. This vulnerability allows remote code execution, enabling attackers to execute arbitrary commands on the affected website, potentially leading to full control over the site.

Impact

Exploitation of this vulnerability allows for remote code execution on the affected website, which could be used to gain unauthorized access and control over the site.

Remediation

Users are advised to update to the latest version of the Builderall Builder for WordPress plugin. For those using Patchstack, a mitigation rule has been issued to block attacks until an official patch is available.