Lucene search
+L

1 matches found

Cvelist
Cvelist
added 2023/07/31 9:37 a.m.34 views

CVE-2023-3508 WooCommerce Pre-Orders < 2.0.3 - Unauthorised Actions via CSRF

The WooCommerce Pre-Orders WordPress plugin before 2.0.3 has a flawed CSRF check when processing its tab actions, which could allow attackers to make logged in admins email pre-orders customer, change the released date, mark all pre-orders of a specific product as complete or cancel via CSRF atta...

6.6AI score0.00307EPSS
SaveExploits2References1
Rows per page
Query Builder