Lucene search

K
wpvulndbWpvulndbWPVDB-ID:77F06E9C-8ACE-468A-A6A3-891D56BF8745
HistoryOct 11, 2023 - 12:00 a.m.

Woocommerce ESTO < 2.23.2 - Settings Update via CSRF

2023-10-1100:00:00
wpscan.com
4
woocommerce
esto
csrf
settings update
attack

AI Score

6.9

Confidence

High

EPSS

0.001

Percentile

24.1%

Description The plugin does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack

AI Score

6.9

Confidence

High

EPSS

0.001

Percentile

24.1%

Related for WPVDB-ID:77F06E9C-8ACE-468A-A6A3-891D56BF8745