CVE-2026-15046

The LitExtension WordPress plugin through 1.2.5 does not verify a nonce before an administrative action that overwrites the store-migration connector's authentication token, allowing attackers to take over the connector token by tricking a logged-in administrator into clicking a crafted link (CSRF).

CVSS v3 4.2 MEDIUM

4.2^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 1.6 / Impact : 2.5

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://wpscan.com/vulnerability/3d377332-e19e-42fa-9522-3fca239edede/

Configurations

No configuration.

History

16 Oct 2026, 13:10

Type	Values Removed	Values Added
Summary		(es) El plugin de WordPress LitExtension hasta 1.2.5 no verifica un nonce antes de una acción administrativa que sobrescribe el token de autenticación del conector de migración de tienda, permitiendo a los atacantes tomar el control del token del conector engañando a un administrador con sesión iniciada para que haga clic en un enlace manipulado (CSRF).

Information

Published : 2026-08-21 12:16

Updated : 2026-10-16 15:10

NVD link : CVE-2026-15046

Mitre link : CVE-2026-15046

CVE.ORG link : CVE-2026-15046

JSON object : View

Products Affected

No product.

CWE

CWE-352

Cross-Site Request Forgery (CSRF)

{"id": "CVE-2026-15046", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-15046", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-08-21T12:48:22.400383Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "contact@wpscan.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.2, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 2.5, "exploitabilityScore": 1.6}]}, "affected": [{"source": "contact@wpscan.com", "affectedData": [{"vendor": "Unknown", "product": "LitExtension", "versions": [{"status": "affected", "version": "0", "versionType": "semver", "lessThanOrEqual": "1.2.5"}], "collectionURL": "https://wordpress.org/plugins", "defaultStatus": "unknown"}]}], "published": "2026-08-21T12:16:22.830", "references": [{"url": "https://wpscan.com/vulnerability/3d377332-e19e-42fa-9522-3fca239edede/", "source": "contact@wpscan.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-352"}]}], "descriptions": [{"lang": "en", "value": "The LitExtension WordPress plugin through 1.2.5 does not verify a nonce before an administrative action that overwrites the store-migration connector's authentication token, allowing attackers to take over the connector token by tricking a logged-in administrator into clicking a crafted link (CSRF)."}, {"lang": "es", "value": "El plugin de WordPress LitExtension hasta 1.2.5 no verifica un nonce antes de una acci\u00f3n administrativa que sobrescribe el token de autenticaci\u00f3n del conector de migraci\u00f3n de tienda, permitiendo a los atacantes tomar el control del token del conector enga\u00f1ando a un administrador con sesi\u00f3n iniciada para que haga clic en un enlace manipulado (CSRF)."}], "lastModified": "2026-10-16T15:10:00.103", "sourceIdentifier": "contact@wpscan.com"}