published August 2, 2021
NVD has not assigned a CVSS score to this record. It sits in the 99.1th percentile for exploit probability.
🚨 Unauthenticated users can exploit this vulnerability by simply sending requests to the OnAir2 WordPress theme or QT KenthaRadio plugin — it's like giving out free passes to a party that lets you sneak in anywhere! 🔥 Think of it as a restaurant where anyone can order food from the kitchen without checking in — they could request anything, including dishes meant for the VIPs. This proxy functionality allows attackers to essentially ask the server to fetch and display any content they want. An attacker can leverage this flaw to exploit SSRF or RFI vulnerabilities, potentially leading to unauthorized access to sensitive files or data on your server. This could result in data leakage or even server compromise — a scenario that can be absolutely devastating for your website's integrity and security.
Think of it as a restaurant where anyone can order food from the kitchen without checking in — they could request anything, including dishes meant for the VIPs. This proxy functionality allows attackers to essentially ask the server to fetch and display any content they want. The OnAir2 theme and QT KenthaRadio plugin expose a proxy feature that does not require authentication. This allows attackers to make arbitrary requests through the server, which could fetch external content or internal files without proper permission checks.
An attacker can leverage this flaw to exploit SSRF or RFI vulnerabilities, potentially leading to unauthorized access to sensitive files or data on your server. This could result in data leakage or even server compromise — a scenario that can be absolutely devastating for your website's integrity and security. Update the OnAir2 theme to version 3.9.9.2 and the QT KenthaRadio plugin to version 2.0.2 to close this gap. Additionally, review server configurations to ensure that proxy functionalities are appropriately restricted to authenticated users only. You've got this! Implement these fixes and you'll be one step closer to securing your site like a pro! 🛡️