Описание
The WooCommerce Pre-Orders WordPress plugin before 2.0.3 has a flawed CSRF check when canceling pre-orders, which could allow attackers to make logged in admins cancel arbitrary pre-orders via a CSRF attack
Ссылки
- ExploitThird Party Advisory
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 2.0.3 (исключая)
cpe:2.3:a:woocommerce:woocommerce_pre-orders:*:*:*:*:*:wordpress:*:*
EPSS
Процентиль: 21%
0.00067
Низкий
6.5 Medium
CVSS3
Дефекты
Связанные уязвимости
CVSS3: 6.5
github
больше 2 лет назад
The WooCommerce Pre-Orders WordPress plugin before 2.0.3 has a flawed CSRF check when canceling pre-orders, which could allow attackers to make logged in admins cancel arbitrary pre-orders via a CSRF attack
EPSS
Процентиль: 21%
0.00067
Низкий
6.5 Medium
CVSS3