CVE-2012-5178

Cross-site request forgery CSRF vulnerability in the Welcart plugin before 1.2.2 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that complete a purchase...

CVE-2012-5178

Cross-site request forgery CSRF vulnerability in the Welcart plugin before 1.2.2 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that complete a purchase...

CVE-2012-5178

CVE-2012-5178 affects the Welcart WordPress plugin up to version 1.2.1 (pre-1.2.2). It is a CSRF vulnerability that allows an attacker to hijack a logged-in user’s authentication to complete a purchase. The issue arises in requests that finalize a purchase; no exploit details are provided in the ...