6 matches found
CVE-2019-15770
The woo-address-book plugin before 1.6.0 for WordPress has save calls without nonce verification checks...
WordPress woo-address-book plugin cross-site request forgery vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. woo-address-book is a plugin for e-commerce sites that uses it to manage shipping addresses. A cross-site request forgery vulnerabilit...
CVE-2019-15770
The woo-address-book plugin before 1.6.0 for WordPress has save calls without nonce verification checks...
CVE-2019-15770
The woo-address-book plugin before 1.6.0 for WordPress has save calls without nonce verification checks...
PT-2019-14379
Name of the Vulnerable Software and Affected Versions woo-address-book plugin versions prior to 1.6.0 Description The issue concerns the woo-address-book plugin for WordPress, where save calls lack nonce verification checks, potentially allowing unauthorized modifications. Recommendations For...