Lucene search
WpvulndbWPVDB-ID:D1316A66-675F-432E-AB35-12312768C4CBHistoryJan 27, 2023 - 12:00 a.m.
Ecwid Shopping Cart < 6.11.4 - Import via CSRF
2023-01-2700:00:00
wpscan.com
12
ecwid
shopping cart
csrf
vulnerability
woo data
import
security
EPSS
0.001
Percentile
33.1%
The plugin does not have CSRF check when importing Woo data, which could allow attackers to make logged in admins perform such action via a CSRF attack
Affected configurations
Node
lightspeedhqecwid_ecommerce_shopping_cartRange<6.11.4wordpress
| Vendor | Product | Version | CPE |
|---|---|---|---|
| lightspeedhq | ecwid_ecommerce_shopping_cart | * | cpe:2.3:a:lightspeedhq:ecwid_ecommerce_shopping_cart:*:*:*:*:*:wordpress:*:* |
Related
prion
prion
Cross site request forgery (csrf)
2023-02-14 12:15:00
cve
cve
CVE-2023-24377
2023-02-14 12:15:15
cvelist
cvelist
patchstack
patchstack
nvd
nvd
CVE-2023-24377
2023-02-14 12:15:15