cleantalk
Vulnerabilities and Security Researches

Conditional Shipping for WooCommerce, CVE-2025-39564

CVE, Research URL

CVE-2025-39564

Published on
Apr 16, 2025
Research Description
Conditional Shipping for WooCommerce [conditional-shipping-for-woocommerce] < 3.4.1 CVE-2025-39564 [en] Cross-Site Request Forgery (CSRF) vulnerability in WP Trio Conditional Shipping for WooCommerce allows Cross Site Request Forgery. This issue affects Conditional Shipping for WooCommerce: from n/a through 3.4.0.
Affected versions
Min -, max 3.4.1.
Status
vulnerable