CVE-2022-1442 — AI Deep Analysis Summary

🚨 **Essence**: Improper Access Control in `action.php` allows unauthenticated data leakage. 💥 **Consequences**: Attackers can steal sensitive API keys (PayPal, Stripe, Mailchimp, etc.) and secrets.…

🛡️ **Root Cause**: CWE-862 (Missing Authorization). 🐛 **Flaw**: The file `~/core/forms/action.php` lacks proper access checks. 🔓 **Result**: No authentication required to access sensitive configuration data.

👥 **Vendor**: roxnor. 📦 **Product**: MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor. 📅 **Affected Versions**: Metform <= 2.1.3. 🌐 **Platform**: WordPress sites using this specific plugin.

🕵️ **Privileges**: Unauthenticated (No login needed). 🔑 **Data Exposed**: All API keys and secrets for integrated services (PayPal, Stripe, Hubspot, HelpScout, reCAPTCHA, etc.).…

📉 **Threshold**: LOW. 🚫 **Auth Required**: None. 🌍 **Access**: Publicly accessible via HTTP. ⚙️ **Config**: Default installation vulnerable. 🎯 **Ease**: Trivial to exploit remotely.

✅ **Yes, Public Exploitable**. 📜 **PoC Available**: GitHub repo `RandomRobbieBF/CVE-2022-1442` provides a bash script. 🧪 **Scanner**: Nuclei templates exist for automated detection.…

🔍 **Manual Check**: Request `http://[target]/wp-content/plugins/metform/core/forms/action.php`. 📊 **Response**: Look for JSON output containing form titles or success messages.…

🔧 **Fix**: Update MetForm plugin to version > 2.1.3. 📝 **Patch**: Official changeset `2711944` in `core/forms/action.php` addresses the access control.…

🚫 **No Patch?**: Disable the MetForm plugin immediately. 🛑 **Block**: Restrict access to `/wp-content/plugins/metform/` via `.htaccess` or WAF.…

🔥 **Priority**: CRITICAL. ⏱️ **Urgency**: HIGH. 💸 **Risk**: Direct financial impact due to payment gateway keys (Stripe/PayPal) exposure. 🚀 **Action**: Patch immediately. Do not wait for next maintenance window.