Beveiligingsadvies

CVE-2023-3507

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-07-31 09:37:37
Laatst bijgewerkt 2025-04-23 16:19:48
Toegewezen door WPScan
CVSS-score 6.5
Status PUBLISHED

Beschrijving

The WooCommerce Pre-Orders WordPress plugin before 2.0.3 has a flawed CSRF check when canceling pre-orders, which could allow attackers to make logged in admins cancel arbitrary pre-orders via a CSRF attack