8.8
High
CVE-2023-3547 The All in One B2B for WooCommerce WordPress plugin through 1.0.3 does not properly check nonce values in several…
Description
The All in One B2B for WooCommerce WordPress plugin through 1.0.3 does not properly check nonce values in several actions, allowing an attacker to perform CSRF attacks.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| All in One B2B for WooCommerce 1.0 | earliest → 1.0.3 | No fix stated |