{"schemaVersion":3,"id":"CVE-2015-10115","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"A vulnerability, which was classified as problematic, was found in WooSidebars Sidebar Manager Converter Plugin up to 1.1.1 on WordPress. This affects the function process_request of the file classes/class-woosidebars-sbm-converter.php. The manipulation leads to open redirect. It is possible to initiate the attack remotely. Upgrading to version 1.1.2 is able to address this issue. The patch is named a0efb4ffb9dfe2925b889c1aa5ea40b4abbbda8a. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-230655.","dates":{"published":"2023-06-05T18:00:04.234Z","modified":"2024-08-06T08:58:26.482Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":6.1,"severity":"medium","version":"3.1","versionLabel":"v3.1","source":"NVD","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":4.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","exploitability":null,"impact":null,"computed":false},{"version":"3.0","versionLabel":"v3.0","source":"CVE.org","score":4.3,"severity":"medium","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"CVE.org","score":5,"severity":"medium","vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":6.1,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":5,"severity":"medium","vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"wordfence","score":6.1,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00696,"percentile":0.52414,"severity":"low","asOf":"2026-10-21T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-21T00:00:00.000Z","baselineScore":0.00696},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00696,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00696,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00696,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00696,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00696,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00696,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00696,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00696,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00696,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00696,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00696,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00696,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00696,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00696,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00696,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00696,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00696,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00696,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00696,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00696,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00696,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00696,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00696,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00696,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00696,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00696,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00696,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00696,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00696,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00696,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00696,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00696,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00696,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00696,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00696,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00696,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00696,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.00696,"percentile":0.52414}],"last30":[{"date":"2026-09-21T00:00:00.000Z","score":0.00696,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00696,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00696,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00696,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00696,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00696,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00696,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00696,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00696,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00696,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00696,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00696,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00696,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00696,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00696,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00696,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00696,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00696,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00696,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00696,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00696,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00696,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00696,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00696,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00696,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00696,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00696,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00696,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00696,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00696,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.00696,"percentile":0.52414}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-601","name":"URL Redirection to Untrusted Site ('Open Redirect')","description":"The web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a redirect.","type":"weakness","status":"Draft","abstraction":"Base","likelihoodOfExploit":"Low","url":"https://cwe.mitre.org/data/definitions/601.html"},{"id":"CWE-79","name":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","description":"The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.","type":"weakness","status":"Stable","abstraction":"Base","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/79.html"}],"affected":[{"vendor":"woocommerce","product":"sidebar_manager_to_woosidebars_converter","name":"sidebar manager to woosidebars converter","label":"sidebar_manager_to_woosidebars_converter","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 1.1.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 1.1.1","eol":null,"hubHref":"/vendor/woocommerce/sidebar_manager_to_woosidebars_converter"},{"vendor":"wordpress","product":"woosidebars-sbm-converter","name":"WooSidebars Sidebar Manager Converter","label":"woosidebars-sbm-converter","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 1.1.1 (fixed in 1.1.2)","noFixRecorded":false,"fixedIn":"1.1.2"}],"versionsText":"≤ 1.1.1 (fixed in 1.1.2)","eol":null,"hubHref":null}],"affectedCount":2,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://vuldb.com/?id.230655","label":"vuldb.com?id.230655","hostname":"vuldb.com","tags":["VDB Entry","Technical Description","Third Party Advisory"]},{"url":"https://vuldb.com/?ctiid.230655","label":"vuldb.com?ctiid.230655","hostname":"vuldb.com","tags":["Signature","Permissions Required","Third Party Advisory"]},{"url":"https://github.com/wp-plugins/woosidebars-sbm-converter/commit/a0efb4ffb9dfe2925b889c1aa5ea40b4abbbda8a","label":"github.com/wp-plugins/woosidebars-sbm-converter/commit/a0efb4ffb9dfe2925b889c1aa5ea40b4abbbda8a","hostname":"github.com","tags":["Patch"]},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3462a1b7-74d9-431a-b1c6-9960f1ad0c19","label":"www.wordfence.com/threat-intel/vulnerabilities/id/3462a1b7-74d9-431a-b1c6-9960f1ad0c19","hostname":"www.wordfence.com","tags":["Vendor Advisory"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2023-06-05T18:00:04.234Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-06T08:58:26.482Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":25,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-22T00:04:12.949Z","stale":false,"partial":false}}