CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
What the vulnerability does
The 1 Click WordPress Migration Plugin – 100% FREE for a limited time plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'start_restore' function in all versions up to, and including, 2.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible.
Explanation of Vulnerability in Simple Terms
The 1 Click Migration & Backup plugin for WordPress allows authenticated users to upload files without proper validation. An attacker with a low-privilege account can upload malicious files, including PHP code, to execute arbitrary commands on the site. This affects all versions up to 2.2.
What an attacker can do
Upload and execute malicious files (including PHP code) on the WordPress site.
Potential impact on your site
Compromised site with full control; attacker can read/modify data, install backdoors, or deface content.
Conditions required to exploit
Attacker needs a low-privilege WordPress account (subscriber or higher).
Key dates
External resources
