Lucene search
WpvulndbWPVDB-ID:EEC7CC57-C515-4C95-9F9E-46BA7913B7C4HistoryOct 11, 2023 - 12:00 a.m.
Fraud Prevention For Woocommerce < 2.1.6 - Settings Update via CSRF
2023-10-1100:00:00
wpscan.com
3
woocommerce
csrf
settings update
admin
attack
plugin
Description The plugin does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack
| CPE | Name | Operator | Version |
|---|---|---|---|
| woo-blocker-lite-prevent-fake-orders-and-blacklist-fraud-customers | eq | 2.1.6 |
Related
nvd
nvd
CVE-2023-39159
2023-10-03 13:15:10
prion
prion
Cross site request forgery (csrf)
2023-10-03 13:15:00
cve
cve
CVE-2023-39159
2023-10-03 13:15:10
cvelist
cvelist
wordfence
wordfence
6.4 Medium
AI Score
Confidence
High
0.0005 Low
EPSS
Percentile
17.8%
Related for WPVDB-ID:EEC7CC57-C515-4C95-9F9E-46BA7913B7C4