CVE-2024-1954

The Oliver POS – A WooCommerce Point of Sale POS plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.4.1.8. This is due to missing or incorrect nonce validation in the includes/class-pos-bridge-install.php file. This makes it possible for...

WordPress Oliver POS Plugin <= 2.4.1.8 is vulnerable to Cross Site Request Forgery (CSRF)

Software Oliver POS Type Plugin Vulnerable versions = 2.4.1.8 Fixed in 2.4.1.9 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-1954 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 749d54aee74a Credits Francesco Carlucci...