CVE-2024-1325

CVE-2024-1325 affects the Live Sales Notification for Woocommerce – Woomotiv WordPress plugin (versions ≤ 3.4.3). The vulnerability is Cross-Site Request Forgery due to missing or incorrect nonce validation in the ajax_cancel_review function, enabling unauthenticated attackers to reset the site’s...

WordPress Live Sales Notification for Woocommerce - Woomotiv Plugin <= 3.4.3 is vulnerable to Cross Site Request Forgery (CSRF)

Software Live Sales Notification for Woocommerce - Woomotiv Type Plugin Vulnerable versions = 3.4.3 Fixed in 3.5.0 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-1325 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID...