Product Enquiry for WooCommerce < 3.1 - Arbitrary Enquiry Deletion via CSRF

2023-12-2800:00:00

Bob Matyas

wpscan.com

woocommerce

csrf

enquiry deletion

6.5 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.1%

JSON

Description The plugin does not have a CSRF check in place when deleting inquiries, which could allow attackers to make a logged in admin delete them via a CSRF attack

PoC

1. Make an enquiry from the frontend form 2. Go to “Woo Quote Popup > Enquiry List” 3. Get the ID of an item 4. Add the ID to the following HTML: 5. See that the item has been deleted.