CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
What the vulnerability does
The Video Merchant plugin for WordPress is vulnerable to Cross-Site Request Forgery in version <= 5.0.4. This is due to missing or incorrect nonce validation on the video_merchant_add_video_file() function. This makes it possible for unauthenticated attackers to upload arbitrary files that make remote code execution possible via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
Explanation of Vulnerability in Simple Terms
Video Merchant versions 5.0.4 and earlier allow unauthenticated users to upload files without restriction. An attacker can upload malicious files by visiting a vulnerable page, potentially gaining control of the site. The vulnerability requires user interaction but poses a critical risk to site integrity and confidentiality.
What an attacker can do
Upload malicious files to the server and execute code on the site.
Potential impact on your site
Attackers can compromise your site, steal data, or inject malware without needing a user account.
Conditions required to exploit
Network access and user interaction (victim must visit attacker-controlled link or page).
Key dates
External resources
