CVE-2022-1020

CVE-2022-1020 affects the WordPress WooCommerce Product Table plugin prior to 3.1.2. The wpt_admin_update_notice_option AJAX action lacks proper authorization and CSRF checks and does not validate the callback parameter, allowing unauthenticated attackers to call arbitrary functions with none or ...