CVE-2023-2329

The CVE-2023-2329 entry corresponds to a CSRF vulnerability in the WooCommerce Google Sheet Connector WordPress plugin (versions before 1.3.6). The issue is a lack of CSRF protection when updating the Access Code, which could let an attacker, via CSRF, cause a logged-in administrator to change th...

WordPress WooCommerce Google Sheet Connector Plugin <= 1.3.5 is vulnerable to Cross Site Request Forgery (CSRF)

Software WooCommerce Google Sheet Connector Type Plugin Vulnerable versions = 1.3.5 Fixed in 1.3.6 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-2329 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID d1cb29a7b9f8 Credits...