4.3 Medium

CVE-2023-48284 Cross-Site Request Forgery (CSRF) vulnerability in WebToffee Decorator – WooCommerce Email Customizer allows Cross…

Description

Cross-Site Request Forgery (CSRF) vulnerability in WebToffee Decorator – WooCommerce Email Customizer allows Cross Site Request Forgery.This issue affects Decorator – WooCommerce Email Customizer: from n/a through 1.2.7.

Affected products and versions

Product	Affected versions	Fixed in
Decorator – WooCommerce Email Customizer 1.2	earliest → 1.2.7	No fix stated

Do you use Decorator – WooCommerce Email Customizer?

Track this CVE Watch Decorator – WooCommerce Email Customizer Check my SBOMs

www.cveye.io/en/cve/CVE-2023-48284

Timeline

Published November 30, 2023
Last modified April 28, 2026

References

patchstack.com patchstack.com

Track this CVE