Lucene search

K
cvelistPatchstackCVELIST:CVE-2023-34015
HistoryJul 11, 2023 - 8:36 a.m.

CVE-2023-34015 WordPress Advanced Flat rate shipping Woocommerce Plugin <= 1.6.4.4 is vulnerable to Cross Site Request Forgery (CSRF)

2023-07-1108:36:04
CWE-352
Patchstack
www.cve.org
4
wordpress
woocommerce
plugin
cross site request forgery
cve-2023-34015
vulnerable
pi websolution
conditional shipping
flexible shipping

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L

AI Score

9

Confidence

High

EPSS

0.001

Percentile

28.1%

Cross-Site Request Forgery (CSRF) vulnerability in PI Websolution Conditional shipping & Advanced Flat rate shipping rates / Flexible shipping for WooCommerce shipping plugin <=Β 1.6.4.4 versions.

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "advanced-free-flat-shipping-woocommerce",
    "product": "Conditional shipping & Advanced Flat rate shipping rates / Flexible shipping for WooCommerce shipping",
    "vendor": "PI Websolution",
    "versions": [
      {
        "changes": [
          {
            "at": "1.6.4.6",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "1.6.4.4",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L

AI Score

9

Confidence

High

EPSS

0.001

Percentile

28.1%

Related for CVELIST:CVE-2023-34015