4.3
Medium
CVE-2022-38470 Cross-Site Request Forgery (CSRF) vulnerability in Customer Reviews for WooCommerce plugin <= 5.3.5 at WordPress
Description
Cross-Site Request Forgery (CSRF) vulnerability in Customer Reviews for WooCommerce plugin <= 5.3.5 at WordPress.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Customer Reviews for WooCommerce (WordPress plugin) 5.3 | earliest → 5.3.5 | No fix stated |