Vulnerabilities CVE-2026-15046

CVE-2026-15046

Medium

Open

TLP:CLEAR

LitExtension: Store to WooCommerce Migration <= 1.2.5 - Connector Token Takeover via CSRF

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

The LitExtension WordPress plugin through 1.2.5 does not verify a nonce before an administrative action that overwrites the store-migration connector's authentication token, allowing attackers to take over the connector token by tricking a logged-in administrator into clicking a crafted link (CSRF).

Details

CVSS Score: 4.2
CVSS Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N
Confidence: 90%
Published: Aug 21, 2026
Last Modified: Aug 21, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.