Skip to content
Sign in
6.5 Medium

CVE-2022-4363 The Wholesale Market WordPress plugin before 2.2.2, Wholesale Market for WooCommerce WordPress plugin before 2.0.1…

Description

The Wholesale Market WordPress plugin before 2.2.2, Wholesale Market for WooCommerce WordPress plugin before 2.0.1 have a flawed CSRF check when updating their settings, which could allow attackers to make a logged in admin update them via a CSRF attack

Affected products and versions

Product Affected versions Fixed in
Wholesale Market 2.2 earliest → < 2.2.2 2.2.2
Wholesale Market for WooCommerce 2.0 earliest → < 2.0.1 2.0.1

Other CVEs of Wholesale Market

The 2 CVEs of Wholesale Market →
CVE-2022-4298 The Wholesale Market WordPress plugin before 2.2.1 does not have authorisation check, as well as does not validate… 9.8 Critical
Track this CVE