CVE-2023-6625

creationtimestamp| type| source ---|---|--- 2024-01-22 21:31:29+00:00| seen| https://t.me/ctinow/171446 2024-01-26 23:16:33+00:00| seen| https://t.me/ctinow/174531 2024-02-16 10:41:36+00:00| seen| https://t.me/ctinow/186247...

CVE-2023-6625

The CVE-2023-6625 entry describes a CSRF vulnerability in the Product Enquiry for WooCommerce WordPress plugin before version 3.1, where deleting inquiries is not protected against CSRF. This could allow a logged-in admin to be tricked into deleting inquiries via CSRF. Affected software: Product ...

CVE-2023-6625 Product Enquiry for WooCommerce < 3.1 - Arbitrary Enquiry Deletion via CSRF

The Product Enquiry for WooCommerce WordPress plugin before 3.1 does not have a CSRF check in place when deleting inquiries, which could allow attackers to make a logged in admin delete them via a CSRF attack...