Lucene search

WpvulndbWPVDB-ID:43D78E7B-B172-4B1D-B4CB-E2B202A0EBBC

HistoryDec 08, 2023 - 12:00 a.m.

Product Size Chart For WooCommerce < 1.1.6 - Settings Update via CSRF

2023-12-0800:00:00

wpscan.com

product

size chart

woocommerce

vulnerability

csrf

security

settings

attackers

admin

AI Score

8.9

Confidence

High

EPSS

0.001

Percentile

24.1%

JSON

Description The plugin does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack

References

patchstack.com/database/vulnerability/product-size-chart-for-woo/wordpress-product-size-chart-for-woocommerce-plugin-1-1-5-cross-site-request-forgery-csrf-vulnerability