CVE-2023-47687

CVE-2023-47687 concerns the Woo Custom and Sequential Order Number WordPress plugin (<= 2.6.0). The vulnerability arises from missing nonce validation on the wcson_save_settings function, enabling unauthenticated attackers to modify plugin settings via forged requests (CSRF). Public sources in...