Lucene search

K
wpexploitWpvulndbWPEX-ID:0CDBA9E9-0D90-495E-9383-6B6539E32192
HistoryApr 24, 2023 - 12:00 a.m.

Side Cart Woocommerce < 2.2 - Settings Reset via CSRF

2023-04-2400:00:00
wpvulndb
70
woocommerce vulnerability
csrf exploit
admin login
security risk

EPSS

0.001

Percentile

27.6%

The plugin does not have CSRF check when reseting its Settings, which could allow attackers to make logged in admins perform such action via a CSRF attack

Make a logged in admin open https://example.com/wp-admin/admin.php?page=side-cart-woocommerce-settings&reset=yes

EPSS

0.001

Percentile

27.6%

Related for WPEX-ID:0CDBA9E9-0D90-495E-9383-6B6539E32192