What the vulnerability does
01Description
A vulnerability, which was classified as problematic, was found in WooSidebars Sidebar Manager Converter Plugin up to 1.1.1 on WordPress. This affects the function process_request of the file classes/class-woosidebars-sbm-converter.php. The manipulation leads to open redirect. It is possible to initiate the attack remotely. Upgrading to version 1.1.2 is able to address this issue. The patch is named a0efb4ffb9dfe2925b889c1aa5ea40b4abbbda8a. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-230655.
Explanation of Vulnerability in Simple Terms
02Summary
The WooSidebars Sidebar Manager Converter plugin contains an open redirect vulnerability. An attacker can craft a malicious link that redirects users to an external website after they interact with the plugin. This can be used to phish credentials or distribute malware. The vulnerability requires user interaction to exploit.
What an attacker can do
03Attacker Capabilities
Redirect site visitors to a malicious external website via a crafted link.
Potential impact on your site
04Site Impact
Users may be redirected away from your site to phishing or malware sites, damaging trust.
Conditions required to exploit
05Prerequisites
Victim must click a malicious link or visit a page containing the redirect.
Key dates
06Disclosure timeline
June 5, 2023
CVE published
August 6, 2024
Record updated
