Lucene search

WpvulndbWPVDB-ID:43D78E7B-B172-4B1D-B4CB-E2B202A0EBBC

HistoryDec 08, 2023 - 12:00 a.m.

Product Size Chart For WooCommerce < 1.1.6 - Settings Update via CSRF

2023-12-0800:00:00

wpscan.com

product

size chart

woocommerce

vulnerability

csrf

security

settings

attackers

admin

8.9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

24.2%

JSON

Description The plugin does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack

CPENameOperatorVersion
eq1.1.6

CPE	Name	Operator	Version
		eq	1.1.6

References

patchstack.com/database/vulnerability/product-size-chart-for-woo/wordpress-product-size-chart-for-woocommerce-plugin-1-1-5-cross-site-request-forgery-csrf-vulnerability