CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
What the vulnerability does
Cross-Site Request Forgery (CSRF) vulnerability in ConoHa by GMO WING WordPress Migrator wing-migrator allows Upload a Web Shell to a Web Server.This issue affects WING WordPress Migrator: from n/a through <= 1.2.0.
Explanation of Vulnerability in Simple Terms
The WING WordPress Migrator plugin through version 1.2.0 is vulnerable to cross-site request forgery (CSRF). An attacker can trick a site administrator into visiting a malicious page, which then performs unauthorized actions on the WordPress site without the admin's knowledge. The vulnerability affects all versions up to and including 1.2.0.
What an attacker can do
Perform unauthorized actions on the WordPress site by tricking an admin into visiting a malicious page.
Potential impact on your site
An attacker can modify site settings, create accounts, or alter content if they trick an admin into clicking a malicious link.
Conditions required to exploit
Site admin must visit a page controlled by the attacker while logged into WordPress.
Key dates
External resources
Related vulnerabilities
