1 Click WordPress Migration Plugin Cross-Site Request Forgery Vulnerability

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in the 1 Click WordPress Migration Plugin, specifically in versions through 2.2. The issue arises from inadequate nonce validation in the cancel_actions() function, allowing unauthenticated attackers to cancel active backups by sending a forged request, provided they can persuade a site administrator to click a link.

Impact

Exploitation of this vulnerability allows for Cross-Site Request Forgery, where an attacker can cancel a backup process on behalf of an administrator.