CVE-2024-2395

The Bulgarisation for WooCommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.0.14. This is due to missing or incorrect nonce validation on several functions. This makes it possible for unauthenticated attackers to generate and delete...

CVE-2024-2395

The Bulgarisation for WooCommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.0.14. This is due to missing or incorrect nonce validation on several functions. This makes it possible for unauthenticated attackers to generate and delete...

CVE-2024-2395

The Bulgarisation for WooCommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.0.14. This is due to missing or incorrect nonce validation on several functions. This makes it possible for unauthenticated attackers to generate and delete...

CVE-2024-2395

CVE-2024-2395 : Bulgarisation for WooCommerce (WordPress) is affected by a CSRF vulnerability due to missing/incorrect nonce validation in multiple functions, enabling unauthenticated attackers to forge requests to generate/delete labels if a site admin is induced to click a link. This vulnerabil...

WordPress Bulgarisation for WooCommerce Plugin <= 3.0.14 is vulnerable to Cross Site Request Forgery (CSRF)

Software Bulgarisation for WooCommerce Type Plugin Vulnerable versions = 3.0.14 Fixed in 3.0.15 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-2395 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 5e6cd7edc42d Credits...