PT-2022-9575

Name of the Vulnerable Software and Affected Versions PPOM for WooCommerce WordPress plugin versions prior to 24.0 Description The issue concerns a lack of authorisation and CSRF checks in the ppom settings panel action AJAX action, allowing any authenticated user to call it and set arbitrary...