Multi Currency For WooCommerce < 1.5.6 - Cross-Site Request Forgery

2023-12-1000:00:00

wpscan.com

woocommerce

cross-site request forgery

unauthorized action

nonce validation

AI Score

8.5

Confidence

High

EPSS

0.001

Percentile

24.1%

JSON

Description The plugin is vulnerable to Cross-Site Request Forgery due to missing or incorrect nonce validation on an unknown function. This makes it possible for unauthenticated attackers to perform an unauthorized action via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.

References

patchstack.com/database/vulnerability/wc-multi-currency/wordpress-multi-currency-for-woocommerce-plugin-1-5-5-cross-site-request-forgery-csrf-vulnerability