Lucene search
PRIOn knowledge basePRION:CVE-2022-4426HistoryJan 09, 2023 - 11:15 p.m.
Cross site request forgery (csrf)
2023-01-0923:15:00
PRIOn knowledge base
www.prio-n.com
1
csrf
vulnerability
mautic
integration
woocommerce
wordpress
plugin
settings
options
attackers
admin
csrf attack
The Mautic Integration for WooCommerce WordPress plugin before 1.0.3 does not have proper CSRF check when updating settings, and does not ensure that the options to be updated belong to the plugin, allowing attackers to make a logged in admin change arbitrary blog options via a CSRF attack.
| CPE | Name | Operator | Version |
|---|---|---|---|
| mautic_integration_for_woocommerce | lt | 1.0.3 |
Related
wpexploit
wpexploit
cve
cve
CVE-2022-4426
2023-01-09 23:15:28
cvelist
cvelist
nvd
nvd
CVE-2022-4426
2023-01-09 23:15:28
wpvulndb
wpvulndb