Security Advisory

CVE-2022-2555

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2022-08-22 15:04:12

Last updated 2024-08-03 00:39:07

Assigner WPScan

CVSS score not scored

State PUBLISHED

Description

The Yotpo Reviews for WooCommerce WordPress plugin through 2.0.4 lacks nonce check when updating its settings, which could allow attacker to make a logged in admin change them via a CSRF attack.

← Browse all CVEs View on cve.org ↗