6.5
Moyenne
CVE-2023-3508 The WooCommerce Pre-Orders WordPress plugin before 2.0.3 has a flawed CSRF check when processing its tab actions,…
Description
The WooCommerce Pre-Orders WordPress plugin before 2.0.3 has a flawed CSRF check when processing its tab actions, which could allow attackers to make logged in admins email pre-orders customer, change the released date, mark all pre-orders of a specific product as complete or cancel via CSRF attacks
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| WooCommerce Pre-Orders 2.0 | premières → < 2.0.3 | 2.0.3 |