Lucene search

K
wpvulndbWpvulndbWPVDB-ID:EEC7CC57-C515-4C95-9F9E-46BA7913B7C4
HistoryOct 11, 2023 - 12:00 a.m.

Fraud Prevention For Woocommerce < 2.1.6 - Settings Update via CSRF

2023-10-1100:00:00
wpscan.com
7
woocommerce
csrf
settings update
admin
attack
plugin

AI Score

6.4

Confidence

High

EPSS

0.001

Percentile

17.9%

Description The plugin does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack

AI Score

6.4

Confidence

High

EPSS

0.001

Percentile

17.9%

Related for WPVDB-ID:EEC7CC57-C515-4C95-9F9E-46BA7913B7C4