CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
What the vulnerability does
Cross-Site Request Forgery (CSRF) vulnerability in AA-Team Wordpress Movies Bulk Importer movies importer allows Cross Site Request Forgery.This issue affects Wordpress Movies Bulk Importer: from n/a through <= 1.0.
Explanation of Vulnerability in Simple Terms
The WordPress Movies Bulk Importer plugin through version 1.0 is vulnerable to cross-site request forgery (CSRF). An attacker can trick a logged-in site administrator into performing unintended actions, such as importing malicious movie data or modifying plugin settings. The vulnerability requires the admin to visit a malicious webpage while authenticated to the WordPress site.
What an attacker can do
Trick an authenticated admin into performing unintended actions like importing data or changing plugin settings.
Potential impact on your site
An attacker could modify plugin settings or import malicious data without your knowledge or consent.
Conditions required to exploit
Admin must be logged into WordPress and visit an attacker-controlled webpage.
Key dates
External resources
Related vulnerabilities
