A vulnerability, which was classified as problematic, was found in WooSidebars Sidebar Manager Converter Plugin up to 1.1.1 on WordPress. This affects the function process_request of the file classes/class-woosidebars-sbm-converter.php. The manipulation leads to open redirect. It is possible to initiate the attack remotely. Upgrading to version 1.1.2 is able to address this issue. The patch is named a0efb4ffb9dfe2925b889c1aa5ea40b4abbbda8a. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-230655.
References
| Link | Resource |
|---|---|
| https://github.com/wp-plugins/woosidebars-sbm-converter/commit/a0efb4ffb9dfe2925b889c1aa5ea40b4abbbda8a | Patch |
| https://vuldb.com/?ctiid.230655 | Permissions Required Third Party Advisory |
| https://vuldb.com/?id.230655 | Third Party Advisory |
| https://github.com/wp-plugins/woosidebars-sbm-converter/commit/a0efb4ffb9dfe2925b889c1aa5ea40b4abbbda8a | Patch |
| https://vuldb.com/?ctiid.230655 | Permissions Required Third Party Advisory |
| https://vuldb.com/?id.230655 | Third Party Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 02:24
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : 5.0
v3 : 4.3 |
| References | () https://github.com/wp-plugins/woosidebars-sbm-converter/commit/a0efb4ffb9dfe2925b889c1aa5ea40b4abbbda8a - Patch | |
| References | () https://vuldb.com/?ctiid.230655 - Permissions Required, Third Party Advisory | |
| References | () https://vuldb.com/?id.230655 - Third Party Advisory |
12 Jun 2023, 12:51
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:woocommerce:sidebar_manager_to_woosidebars_converter:*:*:*:*:*:wordpress:*:* | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.1 |
| First Time |
Woocommerce
Woocommerce sidebar Manager To Woosidebars Converter |
|
| References | (MISC) https://github.com/wp-plugins/woosidebars-sbm-converter/commit/a0efb4ffb9dfe2925b889c1aa5ea40b4abbbda8a - Patch | |
| References | (MISC) https://vuldb.com/?ctiid.230655 - Permissions Required, Third Party Advisory | |
| References | (MISC) https://vuldb.com/?id.230655 - Third Party Advisory |
05 Jun 2023, 18:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-06-05 18:15
Updated : 2024-11-21 02:24
NVD link : CVE-2015-10115
Mitre link : CVE-2015-10115
CVE.ORG link : CVE-2015-10115
JSON object : View
Products Affected
woocommerce
- sidebar_manager_to_woosidebars_converter
CWE
CWE-601
URL Redirection to Untrusted Site ('Open Redirect')