Non notée
CVE-2022-2555 The Yotpo Reviews for WooCommerce WordPress plugin through 2.0.4 lacks nonce check when updating its settings, which…
Description
The Yotpo Reviews for WooCommerce WordPress plugin through 2.0.4 lacks nonce check when updating its settings, which could allow attacker to make a logged in admin change them via a CSRF attack.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Yotpo Reviews for WooCommerce (Unofficial) | 2.0.4 | Pas de correctif indiqué |