CVE-2021-4409

The CVE concerns the WordPress plugin WooCommerce Etsy Integration . It is vulnerable to Cross-Site Request Forgery (CSRF) in versions up to and including 3.3.1, due to missing/incorrect nonce validation in the etcpf_delete_feed() function. This allows an unauthenticated attacker to delete an exp...