Lucene search
HistoryDec 18, 2023 - 11:15 a.m.
CVE-2023-49854
cve-2023-49854
cross-site request forgery
tribe interactive caddy
smart side cart
woocommerce
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
24.3%
Cross-Site Request Forgery (CSRF) vulnerability in Tribe Interactive Caddy – Smart Side Cart for WooCommerce.This issue affects Caddy – Smart Side Cart for WooCommerce: from n/a through 1.9.7.
Affected configurations
Node
madebytribecaddyRange<1.9.8wordpress
Related
wpvulndb
wpvulndb
Caddy < 1.9.8 - Cross-Site Request Forgery
2023-12-10 00:00:00
cvelist
cvelist
prion
prion
Cross site request forgery (csrf)
2023-12-18 11:15:00
cve
cve
CVE-2023-49854
2023-12-18 11:15:13
wordfence
wordfence
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
24.3%
Related for NVD:CVE-2023-49854