Server-Side Request Forgery Vulnerability in Builderius by Builderius.io
CVE-2026-27350

7.2HIGH

Key Information:

Vendor

WordPress
Status
Builderius
Vendor
CVE Published:
10 October 2026

What is CVE-2026-27350?

The Builderius plugin for Builderius.io is susceptible to a Server-Side Request Forgery (SSRF) vulnerability. This flaw enables attackers to send crafted requests to internal services, potentially resulting in unauthorized access to sensitive data or interaction with internal network resources. Affected versions of Builderius include 1.4 and 1.4-beta. Users should ensure they update to the latest secured version promptly to prevent exploitation.

Affected Version(s)

Builderius 1.4 <= 1.4-beta

References

https://patchstack.com/database/wordpress/plugin/builderi...
vdb-entry

CVSS V3.1

Score:
7.2
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Jitlada | Patchstack Bug Bounty Program
.