3 matches found
WordPress Wholesale Market plugin < 2.2.2 - Settings Update via CSRF vulnerability
Settings Update via CSRF vulnerability discovered by WPScan in WordPress Plugin Wholesale Market versions 2.2.2...
CVE-2022-4363
The Wholesale Market WordPress plugin and the Wholesale Market for WooCommerce WordPress plugin are vulnerable to a Cross-Site Request Forgery (CSRF) attack due to flawed CSRF checks during settings updates. This flaw could allow an attacker to force a logged-in administrator to modify plugin set...
CVE-2022-4363 Wholesale Market <= 2.2.2 - Settings Update via CSRF
The Wholesale Market WordPress plugin before 2.2.2, Wholesale Market for WooCommerce WordPress plugin before 2.0.1 have a flawed CSRF check when updating their settings, which could allow attackers to make a logged in admin update them via a CSRF attack...