4.3
Moyenne
CVE-2025-1362 The URL Shortener | Conversion Tracking | AB Testing | WooCommerce WordPress plugin through 9.0.2 does not have CSRF…
Description
The URL Shortener | Conversion Tracking | AB Testing | WooCommerce WordPress plugin through 9.0.2 does not have CSRF checks in some bulk actions, which could allow attackers to make logged in admins perform unwanted actions, such as deleting customers via CSRF attacks
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| URL Shortener | Conversion Tracking | AB Testing | WooCommerce 9.0 | premières → 9.0.2 | Pas de correctif indiqué |