CVE-2023-2895

The WP EasyCart plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 5.4.8. This is due to missing or incorrect nonce validation on the processbulkactivateproduct function. This makes it possible for unauthenticated attackers to bulk activate products...

CVE-2023-2895

CVE-2023-2895 (WP EasyCart for WordPress) is a CSRF vulnerability affecting versions up to and including 5.4.8. Root cause: missing/incorrect nonce validation in the process_bulk_activate_product function allows unauthenticated attackers to bulk-activate products via forged requests, e.g., tricki...

WordPress WP EasyCart Plugin <= 5.4.8 is vulnerable to Cross Site Request Forgery (CSRF)

Software WP EasyCart Type Plugin Vulnerable versions = 5.4.8 Fixed in 5.4.9 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-2895 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID a60a1e37ef26 Credits Alex Thomas Required...