Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4q57-7phr-hqc4

Опубликовано: 16 сент. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 4.3

Описание

The Subscriptions for WooCommerce WordPress plugin before 2.0.3 does not verify the security token on the request that cancels a subscription, allowing attackers to make a logged-in customer cancel their own active subscription through a crafted request they are tricked into making.

The Subscriptions for WooCommerce WordPress plugin before 2.0.3 does not verify the security token on the request that cancels a subscription, allowing attackers to make a logged-in customer cancel their own active subscription through a crafted request they are tricked into making.

EPSS

Процентиль: 4%
0.00144
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-862

Связанные уязвимости

CVSS3: 4.3
nvd
8 дней назад

The Subscriptions for WooCommerce WordPress plugin before 2.0.3 does not verify the security token on the request that cancels a subscription, allowing attackers to make a logged-in customer cancel their own active subscription through a crafted request they are tricked into making.

EPSS

Процентиль: 4%
0.00144
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-862