Skip to content
Sign in
4.3 Medium

CVE-2025-1362 The URL Shortener | Conversion Tracking | AB Testing | WooCommerce WordPress plugin through 9.0.2 does not have CSRF…

Description

The URL Shortener | Conversion Tracking | AB Testing | WooCommerce WordPress plugin through 9.0.2 does not have CSRF checks in some bulk actions, which could allow attackers to make logged in admins perform unwanted actions, such as deleting customers via CSRF attacks

Affected products and versions

Product Affected versions Fixed in
URL Shortener | Conversion Tracking | AB Testing | WooCommerce 9.0 earliest → 9.0.2 No fix stated

Other CVEs of URL Shortener | Conversion Tracking | AB Testing | WooCommerce

The 3 CVEs of URL Shortener | Conversion Tracking | AB Testing | WooCommerce →
CVE-2025-1363 The URL Shortener | Conversion Tracking | AB Testing | WooCommerce WordPress plugin through 9.0.2 does not sanitise… 3.5 Low CVE-2024-13868 The URL Shortener | Conversion Tracking | AB Testing | WooCommerce WordPress plugin through 9.0.2 does not sanitise… 6.1 Medium
Track this CVE