01 Record

CVE-2026-15046

LitExtension: Store to WooCommerce Migration <= 1.2.5 - Connector Token Takeover via CSRF

MediumPUBLISHEDCNA: WPScan

Base score4.2 CVSS v3.xCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N

02 Description

LitExtension: Store to WooCommerce Migration <= 1.2.5 - Connector Token Takeover via CSRF

Published

2026-08-21 11:40Z13 HR AGO

Last updated

2026-08-21 12:48Z12 HR AGO

Reserved

2026-07-08

Assigning CNA

WPScan

Record state

PUBLISHED

Severity

Medium (CVSS 4.2)

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N

Weaknesses

SSVC decision

ExploitationnoneAutomatablenoTechnical Impactpartial

Data version

5.2

Document digest

ca888ca7b734e2c795407a585254830529d8672080a9aaf0c2bc1170a0391a30

VendorProductVersionsPlatforms

UnknownLitExtension0 to 1.2.5—