CVE-2022-0165: 
WordPress vulnerability analysis and mitigation

The Page Builder KingComposer WordPress plugin through version 2.9.6 contains an open redirect vulnerability identified as CVE-2022-0165. The vulnerability was discovered and publicly disclosed on February 16, 2022. The issue affects the plugin's AJAX functionality, specifically the kcgetthumbn action, which is accessible to both authenticated and unauthenticated users (WPScan).

The vulnerability stems from improper validation of the 'id' parameter in the kcgetthumbn AJAX action. The plugin fails to properly validate this parameter before performing a redirect operation. The vulnerability has been assigned a CVSS score of 4.3 (Medium) and is classified under CWE-601. It falls under the OWASP Top 10 category A1: Injection (WPScan).

When exploited, this vulnerability allows both authenticated and unauthenticated users to perform unauthorized redirects to arbitrary external URLs. This could be leveraged in phishing attacks or other malicious redirect scenarios (WPScan).

As of the last update on April 8, 2022, there is no known fix available for this vulnerability. Users of the KingComposer plugin should consider implementing additional security controls at the web application firewall level to filter potentially malicious requests to the affected endpoint (WPScan).