Lucene search

K
wpvulndbWpvulndbWPVDB-ID:EB43A2D9-0FFF-4ACF-A262-DD7FC3B3910D
HistoryOct 30, 2022 - 12:00 a.m.

Advanced Dynamic Pricing for WooCommerce < 4.1.6 - Rule Type Migration via CSRF

2022-10-3000:00:00
wpscan.com
10
woocommerce
plugin
csrf
attack
vulnerability
dynamic pricing

EPSS

0.001

Percentile

20.9%

The plugin does not have CSRF check when migrating rule types, which could allow attackers to make logged in admin perform such action via a CSRF attack

EPSS

0.001

Percentile

20.9%

Related for WPVDB-ID:EB43A2D9-0FFF-4ACF-A262-DD7FC3B3910D