Lucene search

K
wpvulndbWpvulndbWPVDB-ID:9A3C9708-B302-4B3E-808C-4713D7A7B4E0
HistoryOct 10, 2023 - 12:00 a.m.

WooCommerce Product Attachment < 2.2.0 - Checkout Attachements Update via CSRF

2023-10-1000:00:00
wpscan.com
8
woocommerce
product attachment
csrf
checkout
attachements
security

AI Score

6.4

Confidence

High

EPSS

0.001

Percentile

17.9%

Description The plugin does not have CSRF check when saving checkout attachements, which could allow attackers to make logged in users perform such action via a CSRF attack

AI Score

6.4

Confidence

High

EPSS

0.001

Percentile

17.9%

Related for WPVDB-ID:9A3C9708-B302-4B3E-808C-4713D7A7B4E0