WooCommerce PDF Invoice Builder < 1.2.91 - Invoice Update via CSRF

2023-09-0700:00:00

wpscan.com

woocommerce

pdf

invoice

csrf

attack

security

AI Score

6.4

Confidence

High

EPSS

0.001

Percentile

38.8%

JSON

Description The plugin does not have CSRF check when updating invoices, which could allow attackers to make logged in admin perform such action via a CSRF attack