CVE-2015-10115
WooSidebars Sidebar Manager Converter Plugin class-woosidebars-sbm-converter.php process_request redirect
- State
- Published
- Severity
- 4.3 Medium
- Published
- Jun 5, 2023
- Updated
- Aug 6, 2024
- Reserved
- Jun 3, 2023
Description
A vulnerability, which was classified as problematic, was found in WooSidebars Sidebar Manager Converter Plugin up to 1.1.1 on WordPress. This affects the function process_request of the file classes/class-woosidebars-sbm-converter.php. The manipulation leads to open redirect. It is possible to initiate the attack remotely. Upgrading to version 1.1.2 is able to address this issue. The patch is named a0efb4ffb9dfe2925b889c1aa5ea40b4abbbda8a. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-230655.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 4.3 Medium | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N | VulDB |
| 3.0 | 4.3 Medium | CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N | VulDB |
| 2.0 | 5.0 Medium | AV:N/AC:L/Au:N/C:N/I:P/A:N | VulDB |
Weaknesses
- CWE-601 Open Redirect
Affected Products
| Product | Versions |
|---|---|
WooSidebars Sidebar Manager Converter Pluginn/a |
|
References
- https://vuldb.com/?id.230655vdb-entrytechnical-description
- https://vuldb.com/?ctiid.230655signaturepermissions-required
- https://github.com/wp-plugins/woosidebars-sbm-converter/commit/a0efb4ffb9dfe2925b889c1aa5ea40b4abbbda8apatch
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.