41 matches found
ThemeHigh WooCommerce Wishlist and Comparison < 1.0.5 - Unauthorised AJAX call
Some AJAX actions did not have proper CSRF and authorisation checks, allowing unauthorised call either via unauthenticated/low privilege users or CSRF, which could allow attackers to reset or change the settings of the plugin for example PoC Reset arbitrary option in the plugin v 1.0.5 POST...
2.7AI score
SaveExploits0Affected Software1
20