Cross site request forgery (csrf)

2023-12-1822:15:00

PRIOn knowledge base

www.prio-n.com

cross-site request forgery

codeastrology

quantity plus minus button

woocommerce

vulnerability

nvd

7.2 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

24.3%

JSON

Cross-Site Request Forgery (CSRF) vulnerability in CodeAstrology Team Quantity Plus Minus Button for WooCommerce by CodeAstrology.This issue affects Quantity Plus Minus Button for WooCommerce by CodeAstrology: from n/a through 1.1.9.

CPENameOperatorVersion
quantity_plus_minus_button_for_woocommercelt1.2.0

CPE	Name	Operator	Version
	quantity_plus_minus_button_for_woocommerce	lt	1.2.0

References

patchstack.com/database/vulnerability/wc-quantity-plus-minus-button/wordpress-quantity-plus-minus-button-for-woocommerce-by-codeastrology-plugin-1-1-9-cross-site-request-forgery-csrf-vulnerability?_s_id=cve