DN Shipping by Weight for WooCommerce, CVE-2024-11842

CVE, Research URL: CVE-2024-11842
Home page URL: Security reports for DN Shipping by Weight for WooCommerce
Application: DN Shipping by Weight for WooCommerce
Published on: Dec 27, 2024
Research Description: The DN Shipping by Weight for WooCommerce WordPress plugin before 1.2 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack
Affected versions: max 1.2.
Status: vulnerable