CVE-2022-2657

The Multivendor Marketplace Solution for WooCommerce WordPress plugin before 3.8.12 is lacking authorisation and CSRF in multiple AJAX actions, which could allow any authenticated users, such as subscriber to call them and suspend vendors reporter by the submitter or update arbitrary order status...

CVE-2022-2657

creationtimestamp| type| source ---|---|--- 2022-09-05 16:12:13+00:00| seen| https://t.me/cibsecurity/49287...

CVE-2022-2657

CVE-2022-2657 affects the Multivendor Marketplace Solution for WooCommerce WordPress plugin, prior to version 3.8.12. The issue is lack of authorization checks and CSRF protection in multiple AJAX actions, enabling not only unauthenticated CSRF abuse but also action calls by authenticated users (...