Aruba Migration Tool
Monthly
The Aruba Migration Tool plugin for WordPress, versions up to and including 1.0.4, is affected by a broken access control vulnerability (CWE-862) that enables an authenticated attacker with subscriber-level permissions to access sensitive data, resulting in a high confidentiality impact. With a CVSS score of 6.5, exploitation requires a valid low-privilege account and no user interaction; no public exploit has been identified at time of analysis. The risk is moderate but constrained by the authentication prerequisite and the plugin's niche deployment.
The Aruba Migration Tool plugin for WordPress, versions up to and including 1.0.4, is affected by a broken access control vulnerability (CWE-862) that enables an authenticated attacker with subscriber-level permissions to access sensitive data, resulting in a high confidentiality impact. With a CVSS score of 6.5, exploitation requires a valid low-privilege account and no user interaction; no public exploit has been identified at time of analysis. The risk is moderate but constrained by the authentication prerequisite and the plugin's niche deployment.