WooCommerce Brands < 1.6.50 - Cross-Site Request Forgery

2023-07-1800:00:00

wpscan.com

woocommerce

brands

csrf

checks

security

attacks

manipulation

AI Score

8.7

Confidence

High

EPSS

0.001

Percentile

28.3%

JSON

Description The plugin does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks

References

patchstack.com/database/vulnerability/woocommerce-brands/wordpress-woocommerce-brands-plugin-1-6-49-cross-site-request-forgery-csrf-vulnerability

woocommerce.com/document/woocommerce-brands/