Lucene search
+L

41 matches found

WPVulnDB
WPVulnDB
•added 2021/05/08 12:00 a.m.•16 views

ThemeHigh WooCommerce Wishlist and Comparison < 1.0.5 - Unauthorised AJAX call

Some AJAX actions did not have proper CSRF and authorisation checks, allowing unauthorised call either via unauthenticated/low privilege users or CSRF, which could allow attackers to reset or change the settings of the plugin for example PoC Reset arbitrary option in the plugin v 1.0.5 POST...

2.7AI score
SaveExploits0Affected Software1
Rows per page
Query Builder