Lucene search
WpvulndbWPVDB-ID:EE2B1196-820A-40A0-894A-C728546F5F4AHistoryMay 22, 2023 - 12:00 a.m.
WooCommerce Follow-Up Emails < 4.9.50 - Cross-Site Request Forgery (CSRF)
2023-05-2200:00:00
wpscan.com
7
woocommerce
follow-up emails
csrf
vulnerability
software
EPSS
0.001
Percentile
27.7%
The plugin does not protect some of its actions against CSRF attacks, allowing an unauthenticated attacker to perform actions on their behalf by tricking a logged in user to submit a crafted request.
References
patchstack.com/database/vulnerability/woocommerce-follow-up-emails/wordpress-woocommerce-follow-up-emails-plugin-4-9-40-multiple-cross-site-request-forgery-csrf-vulnerability
www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/woocommerce-follow-up-emails/woocommerce-follow-up-emails-4940-cross-site-request-forgery
Related
nvd
nvd
CVE-2023-33316
2023-05-28 19:15:09
prion
prion
Cross site request forgery (csrf)
2023-05-28 19:15:00
cvelist
cvelist
cve
cve
CVE-2023-33316
2023-05-28 19:15:09
wordfence
wordfence