Lucene search
Chloe ChamberlandWPVDB-ID:35A5247D-B599-4D95-9F08-1324C870F9D2HistoryJan 13, 2022 - 12:00 a.m.
XootiX Plugins - Various Versions CSRF to Arbitrary Options Update
2022-01-1300:00:00
Chloe Chamberland
wpscan.com
11
0.005 Low
EPSS
Percentile
76.2%
The plugins Login/Signup Popup, Side Cart Woocommerce, and Waitlist Woocommerce are all vulnerable to cross-site request forgery due to a missing nonce check that would make it possible for attackers to update arbitrary options on a vulnerable WordPress site.
PoC
| CPE | Name | Operator | Version |
|---|---|---|---|
| easy-login-woocommerce | lt | 2.3 | |
| waitlist-woocommerce | lt | 2.5.1 | |
| side-cart-woocommerce | lt | 2.1 |
Related
thn
thn
High-Severity Vulnerability in 3 WordPress Plugins Affected 84,000 Websites
2022-01-17 05:18:00
patchstack
patchstack
WordPress Waitlist Woocommerce ( Back in stock notifier ) plugin <= 2.5.1 - Cross-Site Request Forgery (CSRF) vulnerability leading to Arbitrary Options Update
2021-12-17 00:00:00
hivepro
hivepro
cve
cve
CVE-2022-0215
2022-01-18 17:15:10
prion
prion
Cross site request forgery (csrf)
2022-01-18 17:15:00
wordfence
wordfence
84,000 WordPress Sites Affected by Three Plugins With The Same Vulnerability
2022-01-13 14:54:00
wpexploit
wpexploit
XootiX Plugins - Various Versions CSRF to Arbitrary Options Update
2022-01-13 00:00:00
cvelist
cvelist
nvd
nvd
CVE-2022-0215
2022-01-18 17:15:10