CVE-2023-47687

Cross-Site Request Forgery CSRF vulnerability in VJInfotech Woo Custom and Sequential Order Number plugin = 2.6.0 versions...

CVE-2023-47687 WordPress Woo Custom and Sequential Order Number Plugin <= 2.6.0 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in VJInfotech Woo Custom and Sequential Order Number plugin = 2.6.0 versions...

CVE-2023-47687

CVE-2023-47687 concerns the Woo Custom and Sequential Order Number WordPress plugin (&lt;= 2.6.0). The vulnerability arises from missing nonce validation on the wcson_save_settings function, enabling unauthenticated attackers to modify plugin settings via forged requests (CSRF). Public sources in...

WordPress Woo Custom and Sequential Order Number Plugin <= 2.6.0 is vulnerable to Cross Site Request Forgery (CSRF)

Software Woo Custom and Sequential Order Number Type Plugin Vulnerable versions = 2.6.0 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-47687 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 4ba7c776b1e8 Credit...