Lucene search
PRIOn knowledge basePRION:CVE-2023-3507HistoryJul 31, 2023 - 10:15 a.m.
Cross site request forgery (csrf)
2023-07-3110:15:00
PRIOn knowledge base
www.prio-n.com
3
cross site request forgery
woocommerce pre-orders
wordpress
plugin
flawed csrf check
canceling pre-orders
logged in admins
arbitrary pre-orders
nvd
The WooCommerce Pre-Orders WordPress plugin before 2.0.3 has a flawed CSRF check when canceling pre-orders, which could allow attackers to make logged in admins cancel arbitrary pre-orders via a CSRF attack
| CPE | Name | Operator | Version |
|---|---|---|---|
| woocommerce_pre-orders | lt | 2.0.3 |
Related
cve
cve
CVE-2023-3507
2023-07-31 10:15:10
wpvulndb
wpvulndb
WooCommerce Pre-Orders < 2.0.3 - Arbitrary Pre-Order Canceling via CSRF
2023-07-10 00:00:00
wpexploit
wpexploit
WooCommerce Pre-Orders < 2.0.3 - Arbitrary Pre-Order Canceling via CSRF
2023-07-10 00:00:00
nvd
nvd
CVE-2023-3507
2023-07-31 10:15:10
cvelist
cvelist
wordfence
wordfence