A vulnerability, which was classified as problematic, was found in WooSidebars Sidebar Manager Converter Plugin up to 1.1.1 on WordPress. This affects the function process_request of the file classes/class-woosidebars-sbm-converter.php. The manipulation leads to open redirect. It is possible to initiate the attack remotely. Upgrading to version 1.1.2 is able to address this issue. The patch is named a0efb4ffb9dfe2925b889c1aa5ea40b4abbbda8a. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-230655.
References
| Link | Resource |
|---|---|
| https://github.com/wp-plugins/woosidebars-sbm-converter/commit/a0efb4ffb9dfe2925b889c1aa5ea40b4abbbda8a | Patch |
| https://vuldb.com/?ctiid.230655 | Permissions Required Third Party Advisory |
| https://vuldb.com/?id.230655 | Third Party Advisory |
Configurations
Configuration 1 (hide)
|
History
12 Jun 2023, 12:51
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:woocommerce:sidebar_manager_to_woosidebars_converter:*:*:*:*:*:wordpress:*:* | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.1 |
| References | (MISC) https://github.com/wp-plugins/woosidebars-sbm-converter/commit/a0efb4ffb9dfe2925b889c1aa5ea40b4abbbda8a - Patch | |
| References | (MISC) https://vuldb.com/?id.230655 - Third Party Advisory | |
| References | (MISC) https://vuldb.com/?ctiid.230655 - Permissions Required, Third Party Advisory | |
| First Time |
Woocommerce sidebar Manager To Woosidebars Converter
Woocommerce |
05 Jun 2023, 18:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-06-05 18:15
Updated : 2024-05-17 01:03
NVD link : CVE-2015-10115
Mitre link : CVE-2015-10115
CVE.ORG link : CVE-2015-10115
JSON object : View
Products Affected
woocommerce
- sidebar_manager_to_woosidebars_converter
CWE
CWE-601
URL Redirection to Untrusted Site ('Open Redirect')