Lucene search
HistoryOct 03, 2023 - 1:15 p.m.
CVE-2023-39159
cross-site request forgery
dotstore fraud prevention
woocommerce
plugin
security vulnerability
cve-2023-39159
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
5.2 Medium
AI Score
Confidence
High
0.0005 Low
EPSS
Percentile
17.8%
Cross-Site Request Forgery (CSRF) vulnerability in theDotstore Fraud Prevention For Woocommerce plugin <= 2.1.5 versions.
Affected configurations
Node
multidotsfraud_prevention_for_woocommerceRange≤2.1.5wordpress
Related
wpvulndb
wpvulndb
Fraud Prevention For Woocommerce < 2.1.6 - Settings Update via CSRF
2023-10-11 00:00:00
prion
prion
Cross site request forgery (csrf)
2023-10-03 13:15:00
cve
cve
CVE-2023-39159
2023-10-03 13:15:10
cvelist
cvelist
wordfence
wordfence
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
5.2 Medium
AI Score
Confidence
High
0.0005 Low
EPSS
Percentile
17.8%
Related for NVD:CVE-2023-39159