6.5
Moyenne
CVE-2022-4363 The Wholesale Market WordPress plugin before 2.2.2, Wholesale Market for WooCommerce WordPress plugin before 2.0.1…
Description
The Wholesale Market WordPress plugin before 2.2.2, Wholesale Market for WooCommerce WordPress plugin before 2.0.1 have a flawed CSRF check when updating their settings, which could allow attackers to make a logged in admin update them via a CSRF attack
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Wholesale Market 2.2 | premières → < 2.2.2 | 2.2.2 |
| Wholesale Market for WooCommerce 2.0 | premières → < 2.0.1 | 2.0.1 |